Software Distribution Compromise Tactics

The increasing number of software supply chain compromises represents a significant weakness that should be top of mind for security professionals. Regardless of your firm’s core business, chances are they rely on and are connected to a range of software provider’s electronic distribution channels for acquiring initial licenses or software updates. Any such electronic access, even through authorized and vetted means, poses a risk to the organization. Put simply: your software provider’s vulnerabilities could easily become your next breach.

In “Software Distribution Compromise Tactics,” a blog post on FireEye, Pillsbury counsel Meighan O’Reardon discusses how to limit the risk of exposure to your organization.