Varnish Artifact Firewall

Varnish Artifact Firewall in the time of Black October

A malicious LiteLLM release was live on PyPI for 1 hour and 43 minutes. What October's attacks teach, the control that...

The Cyber Resilience Act as Insurance

I just got back from Open Source Summit, and one topic followed me from hallway to hallway: the EU Cyber Resilience Act.

CISA Alert: Axios NPM Supply Chain Compromise (April 2026): How to Protect Your CI/CD Pipelines

On April 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on the compromise of the...