Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Ofer Kozokaro
Supply Chain Attacks Overflow: PyPI Suspended New Registrations
On May 20th, in an unprecedented move, PyPI (the official Python Package manager) announced they are temporarily suspending new users and new projects registration. This dramatic announcement follows a long line of incidents in which malicious packages were uploaded to PyPI, as well as other package managers. Following this topic closely for over a year, we in Legit observe a huge increase in the number of attackers trying to exploit this attack surface.
A DevOps Security Tutorial for Digital Business Leaders (Clone)
Our new Privacy Policy will go into effect on January 1st, 2023. Follow the link to read our updated Privacy Policy
2023 Predictions for Modern Application Security
Software dominates the world andremains abig and accessible attack surface.In 2022, an estimated $6Bwas invested in Application Security, with that number expected to reach $7.5B in 2023. Within AppSec, software supply chain security entered the spotlight two years ago and represents AppSec’s fastest growing attack category with major headlines of breaches and exploits happening on a regular basis.
How to Continuously Detect Vulnerable Jenkins Plugins to Avoid a Software Supply Chain Attack
Jenkins is an open-source automation and build platform that allows for automated tests, integrations, builds, and much more. However, Jenkins also has vulnerabilities that make it susceptible to software supply chain attacks. See how attackers used compromised Jenkins plugins to launch cyberattacks and how to detect vulnerable Jenkins plugins at scale. Part 1: The Threat Almost every software pipeline has an integrated build system to enable CI/CD.
A DevOps Security Tutorial for Digital Business Leaders
DevOps is a great approach to improve the speed and efficiency of software development, but there is an even better way to approach the process with security in mind. Find out what approach works for best digital business leaders and how to implement these changes in your organization. What is DevOps DevOps is a software development methodology that emphasizes collaboration, communication, and integration between software developers and information technology (IT) professionals.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Ofer
Contact Ofer, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack