Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Neta Spektor
What You Need to Know About the EU Cyber Resilience Act
Understand what the CRA entails and how to comply. What is the CRA? (CRA) is an upcoming European Union regulation that aims to ensure that all digital products and services (such as software and hardware connected to the Internet) sold in the EU are designed with strong cybersecurity measures. It mandates that manufacturers secure their products throughout their lifecycle s . Who does the CRA apply to?
Unveiling the changes in PCI DSS version 4
Gain insights in the latest changes in PCI DSS version 4 with this quick overview, highlighting the primary changes and how to best prepare for them. Background The Payment Card Industry Data Security Standard (PCI DSS) has been a critical framework in safeguarding credit card transactions, cardholder data, and PII. It's important for any entity storing, handling, processing, or transmitting cardholder information.
Navigating NIST's CI/CD Security Strategies
On August 30, 2023, NIST published SP 800-204D, an Initial Public Draft (IPD) Named: "Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines". The publication takes the SSDF's high-level policies and sets a guideline for how to comply to them using CI/CD pipelines. With this, you can automate the process of compliance, guarantee that all artifacts that went through the pipelines are compliant, and make the process as zero-trust as possible.
Embracing the Future of Secure Software Development: A Comprehensive Look at the SSDF
This article delves into the Secure Software Development Framework (SSDF), looks at the differences between the traditional Secure Software Development Life Cycle (SSDLC), and goes over the benefits of adopting the SSDF for improved security, compliance, and resilience.
Supply Chain Attacks Overflow: PyPI Suspended New Registrations
On May 20th, in an unprecedented move, PyPI (the official Python Package manager) announced they are temporarily suspending new users and new projects registration. This dramatic announcement follows a long line of incidents in which malicious packages were uploaded to PyPI, as well as other package managers. Following this topic closely for over a year, we in Legit observe a huge increase in the number of attackers trying to exploit this attack surface.
PyPI Suspended New Registrations
On May 20th, in an unprecedented move, PyPI (the official Python Package manager) announced they are temporarily suspending new users and new projects registration. This dramatic announcement follows a long line of incidents in which malicious packages were uploaded to PyPI, as well as other package managers. Following this topic closely for over a year, we in Legit observe a huge increase in the number of attackers trying to exploit this attack surface.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Neta
Contact Neta, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack