https://insinuator.net/tags/supply-chain/ Recent content in Supply Chain on Insinuator.net - Bold Statements Hugo en-us Mon, 22 Jun 2026 00:00:00 +0000 https://insinuator.net/2026/06/heads-up-troopers-roundtable-supply-chain-security/ Mon, 22 Jun 2026 00:00:00 +0000 https://insinuator.net/2026/06/heads-up-troopers-roundtable-supply-chain-security/ <h2 id="how-to-strengthen-supply-chain-security-practical-exchange-and-roadmap">How to strengthen Supply Chain Security: Practical Exchange and Roadmap</h2> <p>Join an open, practitioner-focused roundtable for direct exchange on supply chain security. This session offers a concise overview of core concepts, e.g. SBOM, CSAF, and VEX and digs into the processes behind them: how to obtain, process and apply information to improve security across the supply chain.</p> <p>We will examine:</p> <ul> <li>How SBOM, CSAF and VEX relate and why version-level detail matters.</li> <li>The practical value of an SBOM and why it’s increasingly required by law and IT procurement.</li> <li>How to create and consume SBOMs?</li> <li>Methods to identify dependencies in the context of vulnerabilities.</li> <li>Approaches to triage: not all vulnerabilities affect every stakeholder equally.</li> <li>Techniques to analyze vulnerabilities and identify affected products and product families.</li> <li>Sources of vulnerability information and how to map data unambiguously to products and specific software versions.</li> <li>Reporting obligations: where and how to disclose vulnerabilities.</li> <li>Tools and automation that help manage information volume and complexity.</li> <li>Technical, organizational and personnel challenges to achieving end-to-end supply chain security.</li> <li>The role of AI in supply chain security.</li> <li>How do we protect ourselves from malicious actors / infected dependencies?</li> <li>The Cyber Resilience Act (CRA): implications for companies, products and consumers, the CRA roadmap, and concrete deadlines and actions.</li> <li>We will show a live demonstration of the whole process, e.g. covering the consumption of SBOMs, vulnerability identification and assessment, creation of VEX documents.</li> </ul> <p>This roundtable is designed for security practitioners, product owners, compliance officers and decision-makers who want actionable guidance and peer discussion. Expect candid conversation, real-world examples and next steps you can take to strengthen resilience across your supply chains.</p> https://insinuator.net/2011/08/smart-and-scary-supply-chain-attack/ Thu, 04 Aug 2011 00:00:00 +0000 https://insinuator.net/2011/08/smart-and-scary-supply-chain-attack/ <p><a href="http://www.cisco.com/en/US/products/csr/cisco-sr-20110803-cd.html">This advisory</a> describes an interesting attack vector:</p> <p>“In the period of December 2010 until August 2011, Cisco shipped warranty CDs that contain a reference to a third-party website known to be a malware repository. When the CD is opened with a web browser, it automatically and without warning accesses this third-party website. Additionally, on computers where the operating system is configured to automatically open inserted media, the computer’s default web browser will access the third-party site when the CD is inserted, without requiring any further action by the user.”</p>