Dark Sky Technology

Finally. Trust in Open Source

[Dark Sky Technology @DarkSkyTech]

What are the “5 Things We Must Do To Create Nationally Secure And Resilient Supply Chains” and why?

Read more 👉 https://t.co/Ev3NLOY1F9

#SoftwareSupplyChain #OpenSourceSoftware #SoftwareAssurance #OpenSourceIntelligence #DevSecOps

[Dark Sky Technology @DarkSkyTech]

Remember that software supply chain attack, #SolarWinds? Yeah, Microsoft says it identified 40 victims of that hack. Here's the breakdown >>

https://t.co/q1AGch10V6

#SoftwareSupplyChainAttacks #SoftwareSupplyChain #SoftwareSupplyChainSecurity #Hacking #MaliciousCode

[Dark Sky Technology @DarkSkyTech]

Watch out for #TypoSquatting in your #OpenSourceSoftware 🤣. And #HappyFriday!

[Dark Sky Technology @DarkSkyTech]

It's out! "Comprehensive Open Source Software Security" podcast 🎙️ on Secure Ventures with Kyle McNulty (@VentureWithKyle)!

Give it a listen and comment below 👇.

https://t.co/el16XY0fIt

#opensourcesecurity #softwaresupplychainsecurity #TrustInOpenSource

[Dark Sky Technology @DarkSkyTech]

#HappyFriday #OpenSourceSoftware #OpenSourceSecurity #Developers

[Dark Sky Technology @DarkSkyTech]

Anybody have an thoughts on two-factor authentication?

We know it's an important aspect of security, but dang if it's not a pain in the rear at times...

Is there an easier way to do it?

Read more 👉 https://t.co/uOfUV6r3IF

#Cybersecurity #2FA #MFA #Passwords

[Dark Sky Technology @DarkSkyTech]

Take a moment, just 60 seconds
To honor those brave souls who paid the ultimate price

Take a moment, just 60 seconds
To pay tribute to their selfless sacrifice

Take a moment, just 60 seconds
To appreciate the liberty
Gifted by every fallen hero
On this #MemorialDay

[Dark Sky Technology @DarkSkyTech]

Dark Sky Technology made the cut!

[Dark Sky Technology @DarkSkyTech]

🎙️ In @EmbracingDigit1 podcast, @darrenpulsipher and @DarkSkyTech CEO, @mmehlberg discuss the power of #opensourcesoftware and the risks it can pose to our systems and applications.

Give it a listen!
https://t.co/xaqxE3j0zA

[Dark Sky Technology @DarkSkyTech]

CycloneDX is a software bill of material format supported by OWASP.

Read more 👉 https://t.co/YneglrxktJ

#SBOM #SoftwareBillOfMaterials #CycloneDX #SoftwareSupplyChain #SoftwareDevelopment

[Dark Sky Technology @DarkSkyTech]

We've just been granted $250k from @ColoradoEcoDevo's Advanced Industries Accelerator Program!

https://t.co/KNxeIxcH5Z

Excited to speed up our work on Bulletproof Code. Here's to a safer cyber future. Let's gooooo!!! 🚀 #AI #Cybersecurity #ColoradoTech #Coding

[Dark Sky Technology @DarkSkyTech]

A Software Bill Of Materials, or SBOM is a list of all the “ingredients” required to build and run your software application, along with all the relevant metadata about those ingredients.

Read more 👉 https://t.co/DRcPbehToy

#softwarebillofmaterials #SBOM #SoftwareDevelopment

[Dark Sky Technology @DarkSkyTech]

How mature is your supply chain security?

Read the full article: Software Supply Chain Security Checklist
▸ https://t.co/31bgbtwxc1

#DevelopmentEnvironment #SoftwareSupplyChain #SupplyChainAttacks

[Dark Sky Technology @DarkSkyTech]

From the archives... an oldie but goodie >> Getting setup quickly with Dependency-Track using Azure Container Instances

Read more 👉 https://t.co/kJECN3YS0f

#SoftwareSupplyChain #SupplyChainSecurity #SoftwareDevelopment #OpenSourceSoftware

[Dark Sky Technology @DarkSkyTech]

Read 👉 Using Multi-Stage Builds to Fix Container Vulnerabilities

▸ https://t.co/QpKXkeVoYL

#ContainerSecurity #ContainerVulnerabilities #SoftwareSecurity #SoftwareSupplyChain #OpenSourceSoftware

[Dark Sky Technology @DarkSkyTech]

"Unlike an attack on a device (which only affects those devices in the field), an attack in the software supply chain can find its way toward compromising many, many different types of systems and devices across many different industries."

Read more 👉 https://t.co/FqeXPZQEA8

[Dark Sky Technology @DarkSkyTech]

3 primary areas of risk in the software supply chain:

1. Vulnerable package usage
2. Compromised pipeline tools
3. Code/Artifact integrity

Add the deets in this post 👉 https://t.co/mKd2OA3tKG

#SoftwareSupplyChainAttacks #SoftwareSupplyChain #SoftwareSupplyChainSecurity

[Dark Sky Technology @DarkSkyTech]

"When a vendor’s customers install the new code, attackers gain access to thousands or even tens of thousands of potential targets via their single supply chain hack."

What!?

How?

Well, here's how 👉 https://t.co/LiKHOlkIIw

#softwaresupplychain #python #cybersecurity

[Dark Sky Technology @DarkSkyTech]

Dark Sky Technology helps companies identify malicious threats, untrusted code, and cyber attacks in open source software.

Oh, and we're big into security in general.

Which is why we publish articles like this... on password security 👉 https://t.co/uLOVp22Jfm

Enjoy!

[Dark Sky Technology @DarkSkyTech]

Nowadays securing the software supply chain is a very important aspect of the software development and delivery ecosystem.

Read the full article: CycloneDX SBOM (Software Bill of material) generation with Maven build
▸ https://t.co/caA2agOuoZ

#SBOM #SoftwareBillOfMaterials