Security Weekly
Paul's Security WeeklySubscribe
Supply chain, Risk Assessments/Management

Supply Chain – PSW #811

AI generated description fun: "As the glasses are filled and the mood lightens, our veteran guests, each with a legendary tale or two tucked under their virtual belts, embark on a journey through the complex landscape of supply chain security. These old dogs share war stories, anecdotes, and hard-earned wisdom about the evolving challenges and threats that have shaped their illustrious careers. From the early days of computing to the present era of interconnected systems, our panelists delve into the intricacies of securing the supply chain. Expect insights on the timeless art of social engineering, the ever-expanding attack surface, and the unforeseen vulnerabilities that emerge when least expected."

Talking points:

  • Define the different areas of supply chains * Hardware * Firmware / Low-Level Software * Operating systems and applications * Software you develop yourself
  • Open-source software supply chains have interesting problems
  • Detecting supply chain issues
  • Who is responsible for supply chain security?
Full episode and show notes

Hosts

Principal Security Evangelist at Eclypsium
Senior Vice President, Audience Content Strategy at CyberRisk Alliance
Sr. InfoSec Consultant at Online Business Sytems
Executive Director at Guardedrisk
Product Security Research and Analysis Director at Finite State
Chief Product Officer at CyberSaint

Related

Air Gapped! The Myth of Securing OT – Thomas Johnson – CSP #172

The terminology of ICS has morphed into OT (Operational Technology) security; however many organizations are lacking in addressing the OT security controls. As some companies talk about air gapping as the primary method of securing OT, the reality is many times true air gapping does not exist. Join us as we discuss why these gaps occur and what nee...