ASW #231 - Neatsun Ziv

<p>In this episode, Neatsun Ziv, co-founder and CEO of Ox security takes a deep dive into supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a consortium of leading cybersecurity leaders. OSC&R the first and only open framework for understanding and evaluating existing threats to entire software supply chain security.</p> <p>Segment Resources:</p> <ul> <li>https://pbom.dev/</li> <li>-<a href= "https://github.com/pbom">https://github.com/pbomdev/</a></li> </ul> <p> </p> <p>OSCAR WebSocket hijack that leads to a full workspace takeover in a cloud IDE, malicious packages flood public repos, side-channel attack on a post-quantum algorithm, looking at OWASP's evolution, OAuth misconfigs lead to account takeover, AI risk management framework, Zed Attack Proxy</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/secweekly">https://www.twitter.com/secweekly</a></p> <p> </p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly">https://www.facebook.com/secweekly</a></p> <p>Show Notes: <a href= "https://securityweekly.com/asw231">https://securityweekly.com/asw231</a></p>