2022年12月8日

高级主管由Eilon Elhadad供应链,水安全从最近的黑客攻击而影响澳大利亚澳都斯和健康保险公司仍在响亮的媒体作家估计成本更高的伤害,攻击供应链目标在雷达下飞行。{loadads}然而,他们正在成为最大的担忧网络安全的全球公共和私营部门。后攻击私人医疗保险公司的健康保险公司,澳大利亚网络安全部长克莱尔奥尼尔警告说,一个新的世界在无情的攻击。在全球范围内,技术研究和咨询公司Gartner预测,到2025年,全球近45%的组织将经历袭击他们的软件供应链,展示的关键行动行业需要解决的问题。最近的数据还显示,供应链软件攻击比去年同期增长了300%,2021年增长,有一个明显的攻击发生最近朝鲜黑客菌株制成的开源软件。尽管在过去的两年里努力对抗这类攻击,据报告,超过三分之一的机构一直利用开源软件由于已知漏洞在过去12个月,28%由零日攻击影响。科技行业动员组织,包括OpenSSF提高开源软件的灵活性和安全性通过工作组、市政厅、指导和培训。在美国,白宫已经采取行动,加强软件供应链安全与最近的行政命令。根据我公司获得证据,有更好的软件供应链安全的日益增长的需求。威胁软件供应链升级,与政府法规和行政命令的形式(EO 14028)要求将采取适当的行动,CISOs被迫开发和部署策略更好地保护这一地区的重大弱点。经过多年的讨论DevSecOps,宽2023将采用保护雷竞技 raybet软件增加CISO优先级列表的顶部。 {loadads}Along with this will come adoption of new technologies that enable DevSecOps and help companies contend with the onslaught of threats to the software supply chain. CISOs will prioritise spend on solutions for software composition analysis, SBOMs, and securing the toolchain, and they will look for better ways to measure the health of open source components. We’ve seen time and again how business demands guide technology innovation, and along with this advance come new areas of risk. In recent years, increasing pressure to deliver software faster has widened attack surfaces and introduced severe vulnerabilities — much like in the early days of cloud adoption. New tools, languages and frameworks that support rapid development at scale are being targeted by malicious actors, who understand the catastrophic impact that results from attacks to the software supply chain. In 2023, software supply chain threats will continue to be a significant area of concern. We will see fewer sophisticated attacks like SolarWinds and more attacks like those targeting Log4J, Spring4Shell and OpenSSL, which are used massively across code and production. These attacks have a larger potential blast radius to allow hackers to impact entire markets and wreak havoc for organisations. ###{loadmtreelistings 41292}