Below the Surface: The Supply Chain Security Podcast Subscribe

BTS #5 – Community Insights: Supply Chain Threats, Critical Firmware Attacks, and more!

March 8, 2023

In this edition of Below The Surface, we discuss insights Scott collected from various members of our community. Topics include supply chain threats, critical firmware attacks, and more! We also welcome special guest Tyler Robinson!

View the full report here: https://eclypsium.com/2022/12/13/december-firmware-threat-report/

This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

View Show Index

Full Audio

Segments

1. Community Insights: Supply Chain Threats, Critical Firmware Attacks, and more! – BTS #5

View the full report here: https://eclypsium.com/2022/12/13/december-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Hosts

Paul Asadoorian

Founder at Security Weekly

0offset

https://securityweekly.com

Scott Scheferman

Principal Cyber Strategist at Eclypsium

shagghie#8490

Tyler Robinson

Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

trob#6466

http://darkelement.io/

Insider threat

Everything’s Valid in Code & War: Attacks on the Software Supply Chain – Santiago Torres Arias – PSW #776

March 15, 2023

Software supply chain attacks, those in which hackers target the "water supply" of software are on the rise. This makes software developers everywhere valid targets. We will discuss the developer perspective on software supply chain attacks. Segment Resources: https://in-toto.io https://sigstore.dev

DevOps

Product-Led Growth and Building Products in Cybersecurity – Ross Haleliuk – ESW #308

March 9, 2023

Looking at topics around go-to-market strategy and product management, including: how building products is unique in cybersecurity compared to other industries, what is product-led growth and what shape it takes in security, and how to do it right. Touching on the broader and adjacent topics of writing, supporting cybersecurity startups, investing,...

Application security

DIY Software Bill of Materials How-To – Roland Diaz – ESW #308