Sponsored: Understanding CI/CD attack paths
About this episode
This episode discusses the importance of understanding CI/CD attack paths, particularly in relation to GitHub and supply chain security.
In this sponsored episode, James Wilson chats with SpecterOps CTO Jared Atkinson about the central role that GitHub has played in recent supply chain compromises. GitHub is where code gets built, tested, and shipped to devices, cloud, and on-prem environments. Understanding the paths an attacker can use to get into GitHub, and where they can pivot to from there, is essential to securing your GitHub repos and CI/CD pipelines.
More episodes of Risky Bulletin
- Risky Bulletin: CISA tightens patching rules amid bug deluge
- Srsly Risky Biz: Europe wants to wean itself off US tech
- Risky Bulletin: Nightmare Eclipse drops fresh 0day
- Between Two Nerds: Nerds at NATO
- Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks
- Risky Bulletin: EU unveils digital sovereignty plan
Explore listener stats, chart rankings, contacts and more on the Risky Bulletin podcast page.