DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework
OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM
ASPM How Can Application Security Posture Management (ASPM) Enhance Your Software Supply Chain Security? August 7, 2024
Attacks Analysis Protecting Against Open Source Malicious Packages: What Does (Not) Work July 23, 2024