Can you trust commercial software? Tackling third-party software risk
Summary
Gleaning from our threat repository, containing over 40 billion malware and goodware files, the data reveals a 1,300% increase in malicious packages on major open-source software platforms since 2020. This opaque characteristic of third-party software makes quantifying, tracking, and controlling the security risk presented by it a growing challenge. These incidents are forcing enterprise security executives to acknowledge that third-party software represents one of the largest unaddressed attack surfaces. In fact, the European Union Agency for Cybersecurity (ENISA) predicts that supply chain compromise of software dependencies will be the most prominent cyber threat in 2030. Its Time to Open the Black Box While the solutions above deliver some insights, they merely scratch the surface, ultimately missing the threats that thrust companies into the headlines.