Software Supply Chain

Varnish Artifact Firewall in the time of Black October

A malicious LiteLLM release was live on PyPI for 1 hour and 43 minutes. What October's attacks teach, the control that...

The Cyber Resilience Act as Insurance

I just got back from Open Source Summit, and one topic followed me from hallway to hallway: the EU Cyber Resilience Act.