Securing the Supply Chain by Working With Ethical Hackers

HackerOne experts at the Security@global conference discussed growing software supply-chain risks and recommended practical mitigations including vendor Vulnerability Disclosure Policies, hacker-powered penetration testing, and expanding the Internet Bug Bounty program to better secure open-source dependencies; the piece frames supply-chain compromise as an industry-wide shared responsibility and cites SolarWinds as background context.