Post SolarWinds, understanding your supply chain vulnerabilities

The U.S. Commerce Department has been urged by Sen. Ron Wyden, D-Ore., to bolster the already robust proposed U.S. tech rules that would prevent the utilization of the country's surveillance tools in repressive countries amid concerns of potential gaps that could be exploited by such nations.

Such an intrusion has prompted automated delivery of the malicious lottie-player NPM package versions among users who obtained the library through third-party content delivery networks.

The collaboration offers enterprises a scalable solution that integrates automated public key infrastructure and certificate management to secure continuous integration and continuous delivery pipelines without slowing developer workflows.