Nathan Salminen

Hogan Lovells

+ Follow Contact

Readers' Choice Awards

Cybersecurity

Latest Posts › Supply Chain

Share:

Threat actors increasingly introducing malicious code into open source packages

The risks associated with leveraging open source libraries, and the review needed, are increasing. In the first half of 2025, cybersecurity researchers observed a sharp rise in the incidence of malicious code embedded in...more

6/4/2025 / Audits , Cryptocurrency , Cyber Attacks , Cybersecurity , Malware , Open Source Software , Risk Assessment , Risk Management , Software , Supply Chain

Security Snippets: CISA publishes sector-specific cyber performance goals for IT and product design

The Cybersecurity and Infrastructure Security Agency (CISA) unveiled new cyber performance goals aimed at addressing risks to software development and product design in the IT sector. Last week, the Cybersecurity and...more

1/20/2025 / Cybersecurity , Cybersecurity Information Sharing Act (CISA) , Data Protection , Data Security , Incident Response Plans , Information Technology , Risk Management , Software , Supply Chain , Technology Sector

Security Snippets: NIST publishes guide on due diligence for cyber supply chain risk management

NIST’s “quick-start guide” is designed to assist acquirers as they evaluate the various risks across their network of suppliers, focusing on supply chain tiers, foreign ownership, control or influence (FOCI), provenance,...more

11/8/2024 / Comment Period , Cybersecurity , Due Diligence , NIST , Public Comment , Supply Chain

NIST refines Cybersecurity Security Framework, with increased focus on governance and supply chain

NIST has updated its widely used Cybersecurity Framework to provide key updates and practical resources for organizations to manage and discuss cybersecurity risk. The updated framework, which remains voluntary, is designed...more

3/14/2024 / Cybersecurity , Cybersecurity Framework , NIST , Popular , Risk Management , Supply Chain

4 Results

View per page

Page: of 1