Manager admits to SIM Swapping, GitGuarding State of Secrets, Comparing Dependabot/Semgrep/Snyk
Ex-Google Software Engineer Charged, Secure Software Development Attestation Form, NVD vulnerability reviews on pause
DevSecOps Automation Matrix, Cloudflare's Firewall for AI, $22M Ransomware Payment, Waymo approved in Los Angeles
Measuring security debt, Google is 'absurdly woke', Wyze home security customers seeing wrong footage, and more!
Recognizing My Dream for Perpetual Learning
LLMs are hackers and Ransomware groups under attack!
Temu Suspicion, AI Threat Model, Flipper Zeros Ban, OpenSSF Securing Software Repositories
A global overview of vulnerability databases and disclosure practices
Deepfake video conference, Vision Pro kernel vulnerability, Ivanti under active exploit
The AI race has created a cesspool of third-party packages
OpenAI partners with the Pentagon, NSA admits to purchasing browsing data, CISA's SBOM Guidance, and more.
CramHacks Chronicles: Key Insights On Software Supply Chain Risks
![[CramHacks] Newsletter #20: AI Meets Supply Chain – A Recipe for Disaster](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/cf9e97bf-ccbc-414e-8c90-ffb8e1a6765b/CramHacks_A1__1___5_.png)