Featured Blog
Exposed Secrets, Broken Trust: What the DOGE API Key Leak Teaches Us About Software Security
Earlier this week, Krebs on Security reported that an employee of the Department of Governmental Engineering (DOGE) accidentally published a secret API key that granted access to unreleased AI models from Elon Musk’s xAI venture source. Even more disturbing: researchers found the DOGE API key still worked after Elez was notified of the leak and […]
Supply Chain Cybersecurity, Third Party Risk Management, Vendor Risk Management
Software Supply Chain Security: Understanding and Mitigating Major Risks
Cyberattacks, Cybersecurity, Cybersecurity leadership
Cyberattack 2024 Insights: The Threat Landscape and How to Secure Your Organization
Partnerships, Security contols, Security Controls Reports, Supply Chain Cybersecurity, Tabletop Exercises, Third Party Risk Management
Our Q3 2024 Top Control is Third Party Risk Management: Lessons from the CrowdStrike Outage
Bug Bounty Program, Policy Development