Mike McGuire

Jul 24, 2024 | synopsys.com | Patrick Carey |Fred Bals |Mike McGuire |Taylor Armerding

Code snippets copied from copyleft-licensed open source projects represented the biggest risk in software 15 years ago. The Heartbleed vulnerability, discovered in April 2014, brought to the fore concerns about the security of open source components, and license risk took a bit of a back seat. But the problem never went away. Now, the advent of Generative AI as a tool for writing software is shining a new light on the issue.

May 8, 2024 | cybersecuritydive.com | Mike McGuire

Your software supply chain comprises everything that touches an application or plays a role in its assembly, development, and deployment. It also includes proprietary code and components created by your development team, as well as the infrastructure used to build and deliver that software to your end user. Here are five areas of consideration that should drive your security activities.

May 6, 2024 | cybersecuritydive.com | Mike McGuire

Your software supply chain comprises everything that touches an application or plays a role in its assembly, development, and deployment. It also includes proprietary code and components created by your development team, as well as the infrastructure used to build and deliver that software to your end user. Here are five areas of consideration that should drive your security activities.

Apr 9, 2024 | securityboulevard.com | Mike McGuire

Black Duck Supply Chain Edition Enter Black Duck ® Supply Chain Edition. This new offering provides expanded visibility, security controls, and compliance to your existing supply chain security activities. Here are some of the key capabilities. Comprehensive open source discoveryWith the majority of the software supply chain comprised of open source, failure to properly track and manage it equates to a glaring gap in any risk management strategy.

Apr 9, 2024 | synopsys.com | Mike McGuire |Taylor Armerding |Fred Bals |Tim Mackey

Each year, our "Open Source Security and Risk Analysis” (OSSRA) report highlights the fact that open source software (OSS) plays a critical and substantial role in modern application development, and it is therefore foundational to the software supply chain. The prevalence of OSS within commercial applications makes it difficult to track, and that makes it difficult to manage the risk that it may introduce.