In episode 15 of Scaletozero season 2, We have Yotam Perkal with his vast knowledge of Vulnerability Management, Supply Chain Security, and SBOMs. Stay tuned to the episode and watch him share some really good thoughts from his experiences.
Here are the references shared by our guest:
Hidden Container Vulnerabilities = https://www.youtube.com/live/Eh6b1H_-U20?si=uByRfK2G_h-yYOyn&t=33132
OSV malicious packages advisories = https://osv.dev/list?ecosystem=&q=MAL
OpenSSF LLM Open-Source Ecosystem research = https://www.rezilion.com/blog/report-the-risk-of-generative-ai-and-large-language-models/
Secure Supply Chain Consumption Framework = https://github.com/ossf/s2c2f
SSVC framework = https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc
Scale to Zero - No Security Questions Left Unanswered