Phylum Research | Software Supply Chain Security (Page 23)

Reduce Friction between Developers & AppSec Teams

Phylum Insights and Resources

Successful organizations will make the shift to a developer-first approach to application security and find ways to increase collaboration with development and security personnel.

Phylum Research Team Mar 22, 2022 1 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

SCA or public databases

82%

of Phylum’s findings are not found by
SCA or reported to public databases

Other curation tools

70%

of Phylum’s findings are not found by
other curation tools

Other software supply chain companies

60%

of Phylum’s findings are not found by
other software supply chain companies

Phylum’s Monthly Malware Report: March 2022 – Unknown Unknowns

Relying on security research to manually discover open-source packages that exhibit supply chain issues is no longer enough. To truly mitigate the risk of using...

Phylum Research Team Mar 15, 2022 4 min read

Securing the Innovation Pipeline – 5 Key Considerations on Software Supply Chain Risk

Open-source software growth will continue to outpace proprietary software and 80% of IT leaders expect to increase their use of open-source software for emerging technologies and innovation....

Phylum Research Team Mar 10, 2022 2 min read

Managing Software Supply Chain Security Risks

Over the last year, software supply chain security has gone from a relatively niche topic to a major concern for organizations everywhere. Incidents have skyrocketed...

Phylum Research Team Mar 8, 2022 6 min read

Using Entropy to Identify Obfuscated Malicious Code

In a typical software program, a lot of information can be determined about a program by simply examining the strings that it contains. For example,...

Phylum Research Team Dec 3, 2021 3 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

Subscribe to our research