About this episode

The episode discusses the rising threat of supply chain attacks and the NCSC's recommendations for software security.

Send us Fan Mail Your software is only as trustworthy as the dependencies you quietly inherit and attackers know it. Today I break down the NCSC warning on software supply chain security and why open source package ecosystems have become a high-value target for real-world compromises that spread fast through CI/CD pipelines. I walk through the attack patterns that keep showing up in incidents: maintainer account compromise, expired domain takeover, typosquatting, and credential chaining. We ...

People in this episode

Host: Shon Gerber

Topics covered

• supply chain security
• software dependencies
• open source vulnerabilities
• cybersecurity threats
• attack patterns
• CI/CD pipelines

Keywords

• supply chain attacks
• NCSC
• software security
• open source
• CI/CD
• cybersecurity
• attack patterns

Mentioned in this episode

Organizations: NCSC, open source

More episodes of CISSP Cyber Training Podcast - CISSP Training Program

• CCT 355: Zapier Breach Lessons For Cloud Security and Setting Up TPRM Program in 15 Minutes · June 4, 2026 · 24 min

Explore listener stats, chart rankings, contacts and more on the CISSP Cyber Training Podcast - CISSP Training Program podcast page.