Let's hit RESET!
A call to action, with practical advice
A threat-informed roadmap for securing Kubernetes clusters
A round-up of AI and LLMs being applied to deepfakes and phishing
And why software engineering can help us to mature the security industry
A collection of interesting AI tools, products, resources, papers, and more I’ve come across.
An analysis of over 20 supply chain security vendors, from securing source code access and CI/CD pipelines to SCA, malicious dependencies, container security, SBOMs, code provenance, and more
A breakdown of what constitutes the software supply chain and how to secure each stage