Episode 74: Supply Chain Attack Primer - Popping RCE Without an HTTP Request (feat 0xLupin)
Critical Thinking - Bug Bounty Podcast
Software Supply Chain Security in Tech Companies
The chapter delves into the process of developers writing code in VS Code, committing it to a GitHub repo, and managing source code in tech environments. It explains the distinction between an artifactory and a registry for storing private and public packages, emphasizing the advantages of a centralized supply chain. The discussion also focuses on vulnerabilities in CI builds, exploring techniques for identifying and attacking different parts of the software development flow.
00:00
Transcript
Play full episode
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
