Get the latest tech news
Tech giants grapple with ballooning software supply chain risk, JFrog report reveals
JFrog's Software Supply Chain State of the Union 2024 report reveals ballooning risks, misleading vulnerability scores, and the challenges of AI in coding, urging organizations to prioritize comprehensive security solutions and proactive measures to safeguard their software ecosystems.
The JFrog Security Research team found that 74% ofthe reported common CVEs with High and Critical CVSS scoreson the top 100 DockerHub community images aren’t actuallyexploitable. (Image Credit: JFrog)The report also highlights the hidden risks lurking in software supply chains, with human error and exposed secrets accounting for a notable portion of potential vulnerabilities. Menashe also highlighted a potential threat for 2024, stating, “One thing CISOs need to be on the lookout for in 2024 is attackers increasingly exploiting the fact that AI will sometimes make up libraries that don’t exist.
Or read this on Venture Beat