A Deceptive Dependabot, Insecure JWT, CISA Wants HBOMs, OpenSSF's Critical Projects - ASW #257
Attackers impersonate Dependabot commits, an alg of "none" plagues a JWT, CISA calls for hardware bills of materials, OpenSSF lists its critical projects, Exim (finally! maybe?) has some patches, bug bounties and open source projects, and more!
Show Notes: https://securityweekly.com/asw-257
You May Also Like

AI News Daily
brief.news

Artificial Intelligence Masterclass
AI Masterclass

Tech Brew Ride Home
Morning Brew

The Vergecast
The Verge

The Rollup
Where digital assets and finance converge. Hosted by Andy and Robbie.

Radio Miraya
Radio Miraya

Mark Tilbury
Mark Tilbury Fan

Jack Hopkins
Jack Hopkins

AI Unraveled: Latest AI News & Trends, ChatGPT, Gemini, DeepSeek, Gen AI, LLMs, Agents, Ethics, Bias
Etienne Noumen

The Geoholics
thegeoholics
Community discussion