Security by design is the practice of developing software and hardware to prevent security vulnerabilities and mitigate security risks.| Sternum IoT
With supply chain attacks on the rise, a shared vocabulary and universal framework is needed to provide incremental guidance to harden supply chains for more secure software production. This page introduces the main concepts behind SLSA and explains how it can help anyone involved in producing, consuming, or providing infrastructure for software.| SLSA
NIST wants to explore better ways to align the CSF with other NIST guidance, such as the Privacy Framework, Secure Software Development Framework, Risk Management Framework, Workforce Framework for Cybersecurity (also called the NICE Framework), and its series on IoT cybersecurity.| NIST
NIST’s Secure Software Development Framework (SSDF) is a structured approach that provides guidelines and best practices for integrating security throughout the software development life cycle (SDLC).| wiz.io
Without great security, sophisticated actors can steal AI model weights. Thieves are likely to deploy dangerous models incautiously; none of a lab’s deployment-safety matters if another actor deploys the models without those measures.| ailabwatch.org
Google announces the Coalition for Secure AI (CoSAI) alongside founding member organizations.| Google
In this post we will provide an update on Google's open source security efforts.| Google
How to build secure crypto wallets, analysing issues found during crypto wallet security audits.| Cossack Labs