CramHacks Chronicles: Key Insights On Software Supply Chain Risks
Hey, do you know about supply chain security? ... You mean SBOMs?
This one is for you CVE hype beasts looking to fill your resume 😉
Doing things that aren't intended to be done but should be
![[CramHacks] Newsletter #19: GitLab Account Takeover & PyTorch gets torched](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/9797d90e-c153-43f0-9b43-4a83dc676afd/CramHacks_A1__2_.png)
![[CramHacks] Newsletter #18: Taking Over GitHub Runner Images for Total Domination](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/ec18ddd0-d569-4ec6-97c3-466113b95004/CramHacks_A1__1___3_.png)
![[CramHacks] Newsletter #17: Trolling NPM and the headaches that followed](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/5f71af07-6520-44fc-bff1-7d49e9f60422/CramHacks_A1__1_.png)
![[CramHacks] Newsletter #16: Happy Holidays!](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/71b61c71-4889-40be-a398-48f3dde4121f/CramHacks_A1__1___2_.png)
![[CramHacks] Newsletter #15: Vulnerability Impact Scoring System (VISS)](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/46080d1d-551a-4bb6-83e8-bd7d6b15eac1/CramHacks_A1__1___1_.png)
![[CramHacks] Newsletter #14: Transitive vulnerabilities are bogus](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/3a3da09c-cb71-4fc5-a450-eded47a2c845/CramHacks_A1__14_.png)
![[CramHacks] Newsletter #13: Flaws in Open-Source Vulnerability Disclosures](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/61a46c82-e22f-46eb-b394-c450e92ffe74/CramHacks_A1__13_.png)
![[CramHacks] Newsletter #12: Debian is displeased with proposed EU Legislation (CRA & PLD)](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/98dc34d6-d55b-461c-832e-31fe975ed7fa/CramHacks_A1.png)
![[CramHacks] Newsletter #11: The Open Source Security Index](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/asset/file/cac65653-ea93-4343-b514-0f86fdf115b4/CramHacks_A1__12_.png)