Hacker Summer Camp: Reboot needed to tackle software supply chain threats

Security leaders at a Lineaje-sponsored Black Hat session warned that modern software supply chains—shaped by open source, cloud, APIs, and AI—have outpaced traditional AppSec and testing tools, creating pervasive Nth‑party risk and visibility gaps. Speakers urged contributing to and securing open-source components, embedding Secure by Design from the outset, prioritizing fixes by exploitability and system criticality, and using purchasing power to demand higher security standards in line with CISA’s Secure by Design/Demand guidance. They also called for new evaluation approaches beyond SBOMs—such as ReversingLabs’ SAFE—to assess software behavior and mitigate supply chain attacks.