Learn / Level 6

Software supply chain

You run far more code than you wrote. How it gets compromised.

1. 01Dependencies and SBOMsKnowing what you actually run.7 min
2. 02Malicious packagesTyposquats, takeovers and install scripts.9 min
3. 03Build and CI compromiseAttacking the factory instead of the product.8 min
4. 04Trust stores and certificate authoritiesWhat happens when a CA key leaks.8 min
5. 05Reading real campaignsUsing the monthly attacks tracker as a case file.8 min