Product Security Bad Practices

N/A

TLP:CLEAR Product Security Bad Practices Publication: October 2024 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation This document is distributed as TLP:CLEAR. Recipients may distribute TLP:CLEAR information without restrictions. Information is subject to standard copyright rules. For more information on the Traffic Light Protocol, see cisa.gov/tlp. TLP:CLEAR…

saved by

• Hritesh Sonawane

related reading

• Assessing Claude Mythos Preview’s cybersecurity capabilities \ Anthropicred.anthropic.com
• The Letter - Stop Hacklore!hacklore.org
• Smart Contract Weakness Classification (SWC)swcregistry.io
• Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
• Eliminating Memory Safety Vulnerabilities Once and For Alldarpa.mil
• Eliminating Memory Safety Vulnerabilities Once and For Alldarpa.mil
• Technical guide to information security testing and assessmentnvlpubs.nist.gov
• An alignment assessment of recent cybersecurity incidentsanthropic.com
• Software Supply Chain Security (Part 1)softwareanalyst.substack.com
• 2312.06942arxiv.org
• Agentic Vulnerability Coverage Mapvuln.cs.berkeley.edu
• D3FEND Matrix | MITRE D3FEND™d3fend.mitre.org