What We’re Reading This Month: July 2022

This monthly analyst bulletin highlights three items: Anchore’s 2022 software supply-chain report showing high incidence of supply-chain incidents and low SBOM adoption; research on how attackers exploit cognitive biases and potential defensive use of tarpits; and a Sophos write-up on the Alphv/BlackCat ransomware group describing exploitation of VPN/firewall vulnerabilities, lateral movement techniques (RDP, brute-force), use of tools like Brute Ratel, and ongoing victim data leak activity.