corpus.blog
41,715 blogs · 5,239,565 posts Claim your blog
Record · corpus.blog/posts/01a0fe25-c343-733f-81f1-1c7a34d3eaaa

Atlantic Council Report On Software Supply Chains

DSHR's Blog · published 18 August 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.dshr.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
57
Words captured
5,957

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.schneier.com/blog/archives/2020/07/survey_of_suppl.html
schneier.com
https://www.atlanticcouncil.org/in-depth-research-reports/report/breaking-trust-shades-of-crisis-across-an-insecure-software-supply-chain/
atlanticcouncil.org
https://www.atlanticcouncil.org/programs/scowcroft-center-for-strategy-and-security/cyber-statecraft-initiative/breaking-trust/
atlanticcouncil.org
https://www.wired.com/story/inside-the-unnerving-supply-chain-attack-that-corrupted-ccleaner/
wired.com
https://arstechnica.com/information-technology/2017/07/heavily-armed-police-raid-company-that-seeded-last-weeks-notpetya-outbreak/
arstechnica.com
https://www.itworldcanada.com/article/canadian-cyber-firm-confirms-it-was-the-victim-described-in-rsa-investigation/390903
itworldcanada.com
https://www.trendmicro.com/vinfo/us/threat-encyclopedia/web-attack/124/trend-micro-investigates-june-25-cyber-attacks-in-south-korea
trendmicro.com
https://www.kaspersky.com/about/press-releases/2017_shadowpad-how-attackers-hide-backdoor-in-software-used-by-hundreds-of-large-companies-around-the-world
kaspersky.com
https://www.atlanticcouncil.org/wp-content/uploads/2020/07/Breaking-trust-Shades-of-crisis-across-an-insecure-software-supply-chain.pdf
atlanticcouncil.org
https://www.zdnet.com/article/equifax-blames-open-source-software-for-its-record-breaking-security-breach/
zdnet.com
https://www.vanityfair.com/news/2011/03/stuxnet-201104
vanityfair.com
https://www.bankinfosecurity.com/passfreely-attack-bypasses-oracle-database-authentication-a-9868
bankinfosecurity.com
https://www.wired.com/2015/02/nsa-firmware-hacking/
wired.com
https://arstechnica.com/information-technology/2020/08/chinese-hackers-have-pillaged-taiwans-semiconductor-industry/
arstechnica.com
https://www.wired.com/story/barium-supply-chain-hackers/
wired.com
https://www.vice.com/en_us/article/pan9wn/hackers-hijacked-asus-software-updates-to-install-backdoors-on-thousands-of-computers
vice.com
https://www.asus.com/us/
asus.com
https://sas.kaspersky.com/
sas.kaspersky.com
Operation ShadowHammer Read at the source ↗
securelist.com
https://www.courthousenews.com/wp-content/uploads/2017/11/barium.pdf
courthousenews.com
https://www.welivesecurity.com/2019/03/11/gaming-industry-scope-attackers-asia/
welivesecurity.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/20134508/winnti-more-than-just-a-game-130410.pdf
media.kasperskycontenthub.com
https://www.theregister.com/2020/02/19/unsigned_firmware_security/
theregister.com
https://eclypsium.com/2020/2/18/unsigned-peripheral-firmware/
eclypsium.com
https://www.theregister.com/2015/02/17/kaspersky_labs_equation_group/
theregister.com
http://www.securityweek.com/lessons-learned-diginotar-comodo-and-rsa-breaches
securityweek.com
Experian Sold Consumer Data to ID Theft Service
krebsonsecurity.com
https://www.eff.org/files/ccc2010.pdf
eff.org
https://arstechnica.com/information-technology/2018/02/counterfeit-certificates-sold-online-make-digitally-signed-malware-a-snap/
arstechnica.com
https://blogs.msdn.microsoft.com/ieinternals/2011/03/22/everything-you-need-to-know-about-authenticode-code-signing/
blogs.msdn.microsoft.com
https://www.certificate-transparency.org/what-is-ct
certificate-transparency.org
https://doi.org/10.1038/491325a
doi.org
https://tools.ietf.org/html/rfc6962
tools.ietf.org
https://www.certificate-transparency.org/
certificate-transparency.org
https://www.zdnet.com/article/microsoft-warns-about-two-apps-that-installed-root-certificates-then-leaked-the-private-keys/
zdnet.com
https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf
secorvo.de
https://nvd.nist.gov/vuln/detail/CVE-2018-17612
nvd.nist.gov
https://www.zdnet.com/article/lenovo-accused-of-pushing-superfish-self-signed-mitm-proxy/
zdnet.com
https://en.wikipedia.org/wiki/Superfish
en.wikipedia.org
https://www.zdnet.com/article/dell-admits-preinstalling-root-certificate-and-pledges-to-remove-it/
zdnet.com
https://en.wikipedia.org/wiki/Dell
en.wikipedia.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBv_RJAinS8l_xVYPDaENc2e8VIy84mH1Wsvcd8cQEXTcmFC4xFmB3kO7l5GBJaGWxBaCaKFvvC5_ADE4Z2zQVMBuF-U-EbAeXgZyk6citzZ5iw1trALuM3DWgDM2x-kWDmnmXLwtl5PGr/s1600/code-signing-certificates-ad-640x463.png
blogger.googleusercontent.com
https://doi.org/10.1145/2668152.2673311
doi.org
https://openssf.org/
openssf.org
https://openssf.org/press-release/2020/08/03/technology-and-enterprise-leaders-combine-efforts-to-improve-open-source-security/
openssf.org
https://www.reproducible-builds.org/
reproducible-builds.org
https://en.wikipedia.org/wiki/Willie_Sutton
en.wikipedia.org
https://www.snopes.com/fact-check/willie-sutton/
snopes.com
https://blog.checkpoint.com/2017/09/14/expensivewall-dangerous-packed-malware-google-play-will-hit-wallet/
blog.checkpoint.com
https://threatpost.com/malicious-pokemon-go-app-installs-backdoor-on-android-devices/119174/
threatpost.com
https://www.wired.com/2015/09/hack-brief-malware-sneaks-chinese-ios-app-store/
wired.com
https://arxiv.org/pdf/1711.07278.pdf
arxiv.org
https://www.linuxfoundation.org/blog/2020/08/healthcare-industry-proof-of-concept-successfully-uses-spdx-as-a-software-bill-of-materials-format-for-medical-devices/
linuxfoundation.org
https://spdx.org/tools
spdx.org
https://cyber.harvard.edu/publications/2016/encryption_survey
cyber.harvard.edu
https://www.paulweiss.com/media/3979429/13mar20-cyberspace-solarium.pdf
paulweiss.com
https://www.lawfareblog.com/software-liability-just-starting-point
lawfareblog.com
Elsewhere on blog.dshr.org (8)