Gal Ofri

SLSA Provenance Blog Series, Part 4: Implementation Challenges for SLSA Provenance for Enterprises

In this blog series, we uncover the challenges of adopting SLSA provenance and discuss methods for overcoming those challenges.

Read More

SLSA Provenance Blog Series, Part 3: The Challenges of Adopting SLSA Provenance

In this blog series, we uncover the challenges of adopting SLSA provenance and discuss methods for overcoming those challenges.

Read More

Deep Dive Into SLSA Provenance and Software Attestation

Discover the SLSA framework, designed to ensure the integrity of software artifacts and enhance overall software supply chain security.

Read More

SLSA Provenance Blog Series, Part 1: What Is Software Attestation

In this blog series, we uncover the details of SLSA provenance which refers to the ability to trust the authenticity of artifacts.

Read More

Software Supply Chain Risks to Be Aware of

Discover four key supply chain risks every CISO must address as software technology evolves and security becomes crucial.

Read More

Software Artifacts Best Practices to Prevent Getting Hacked

Malicious actors are poisoning your artifacts to compromise your software supply chain. Learn how to protect your software artifacts and secure servers.

Read More

New Software Supply Chain Attack Installs Trojans on Adobe's Magento E-Commerce Platform

A popular vendor of Magento-Wordpress plug-ins/integrations with 200,000 downloads, has been hacked. This attack is a reminder that malicious 3rd party plug-ins for popular platforms, in this case FishPig integrations for Magento e-commerce platforms, can open the door to critical vulnerabilities.

Read More

What is an SBOM? SBOM explained in 5 minutes

What is an #SBOM, how is it used and why it is important to software supply chain security? We explain the SBOM in 5 minutes, discuss where SBOM adoption is headed and help you think beyond SBOM to gain greater visibility and security across your entire software supply chain environment.

Read More