Insights and Resources

Enterprise Strategy Group Report: The Growing Complexity of Securing the Software Supply Chain

Tech Target’s Enterprise Strategy Group (ESG) recently published a report called “The Growing Complexity of Securing the Software Supply Chain,” based on survey results from 368 security professionals in North America, specifically in the developer

Mikala Vidal Apr 16, 2024 4 min read

Subscribe to our research

Keep up with the latest software supply chain attacks

The xz/liblzma Compromise and Software Supply Chain Security

At the end of March 2024, a major software supply chain attack was identified: some upstream forks of the popular xz/liblzma library that underpins...

Aaron Bray Apr 2, 2024 4 min read

The Power of the Pod

I love podcasts. I started listening in 2005 with an Apple iPod I got the year before. To really date me, I used a 3....

Charles Coggins Sep 30, 2023 5 min read

Secure Supply Chain Consumption Framework (S2C2F) and Phylum

As threat actors increasingly execute more attacks via the open-source software ecosystem, clear gaps have emerged in modern application security. While organizations have adopted technologies...

Mikala Vidal Jun 23, 2023 10 min read

Phylum Adds Open Policy Agent (OPA) and Continuous Reporting

Customers now have more flexibility when creating and enforcing custom policies, and can show compliance with key software supply chain frameworks, regulations and guidelines. Phylum’...

Phylum Research Team Apr 18, 2023 1 min read