BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2cc8-7317-83c5-d9a9d28e8e96@www.devopschat.co
DTSTAMP:20261106T124723Z
DTSTART:20210525T000000Z
DTEND:20210525T010000Z
SUMMARY:How to Avoid the ‘Dependency Confusion’ Software Supply Chain H
 ack
DESCRIPTION:!!!\nPlease register for the webinar here: http://w.prodops.io/
 MayWebinar\n!!!\n\nRevealed this month\, 35 Global technology companies we
 re hacked via the ‘Dependency Confusion’ method. Here’s what you can
  do to protect against future attacks.\n\nWhen an ethical hacker announced
  he’d successfully breached 35 technology company’s vulnerable softwar
 e supply chains\, including Apple\, Microsoft and Netflix\, it was of no s
 urprise to Sonatype.\n\nOur research team detected over 300 suspicious pac
 kages - Alex Birsan’s research efforts - back in 2020. We added the comp
 onents to our data\, alerted the community\, and have been actively protec
 ting customers since.\n\nBy taking advantage of a novel concept known as 
 ‘dependency confusion’ aka ‘namespace confusion’\, Birsan pushed h
 is research packages downstream in an automated fashion to the development
  environments of multinational technology companies. The method he describ
 ed is now widely deployed by other actors\, with 1444% growth in similar p
 ackages in a week since he published his findings.\n\nIn this webinar\, we
  invite Ax Sharma\, Security Researcher and Advocate and Ilkka Turunen\, F
 ield CTO to walk through the events that led to the breaches\, how this pa
 rticular method of software supply chain is so simple\, and yet so effecti
 ve and what you can do about it to avoid exposure in the future.\n\nEthica
 l hacking: why organisations can pay upwards of $100k a breach\n\nHow Sona
 type detected and protected\n\nClear steps on how to avoid future attacks\
 n\nhttps://www.devopschat.co/meetings/how-to-avoid-the-dependency-confusio
 n-software-supply-chain-hack
URL:https://www.devopschat.co/meetings/how-to-avoid-the-dependency-confusio
 n-software-supply-chain-hack
END:VEVENT
END:VCALENDAR