Kusari

You know that feeling when you tackle something you’ve been meaning to learn? Yeah, THAT feeling. ???? The maintainers and experts of the Open Source Project Security Baseline are coming together to help you learn all about this new approach and start using it with your #opensource #community! ?? April 24, 2pm ET #software #security #opensourcesoftware #opensourcesecurity

We're wrapping up our 4-part blog series on getting started securing software supply chains! ? We've walked you through: 1?? Producing SBOMs ?? 2?? Comparing SBOMs ?? 3?? Managing Mountains of SBOMs ?? And NOW 4?? Managing Your Entire Software Supply Chain! ?? The Kusari Platform delivers #transparency into your modern workloads. ???? ?? Why should you care? Because securing your #softwaresupplychain shouldn’t feel like herding cats. Instead, it should be a well-orchestrated, repeatable process — that ray of sun supporting your journey through the forest — and we’re showing you how. ?? Onto the final chapter: https://lnkd.in/ghyjQQaK #SoftwareSupplyChainSecurity #SecurityJourney #SBOM #KusariPlatform #KubeCon

Tim CEO and Co-founder at Kusari challenges the common belief that minimal container images automatically mean better security. He explains that while removing unnecessary binaries and shells is a good practice, the real focus should be on validating each component's purpose in the container. Tim emphasizes two key aspects of container security: ensuring transparency (knowing what's inside) and verification (confirming the image is truly minimal). Watch the full interview: https://ku.bz/-2Sqn9Jb9 This interview is a reaction to Harsha's episode https://ku.bz/n_sJ04xMY

???? Securing Your AI Models: A Must-Read! ????? AI models are powerful. But are they secure? ???? In this blog, Tim Miller dives into what it takes to keep your AI models safe, reliable, and resilient. ?? What's Inside: ? Understanding AI security challenges ?? ? Best practices for safeguarding AI models ?? ? Practical steps you can take today! ?? Read the full article and level up your AI security approach. ???? ?? https://lnkd.in/gr7YQF5i #AI #CyberSecurity #MachineLearning #AISecurity #DevSecOps

???? Taking Security to the Next Level! ???? Hey, software security enthusiasts! ?? Ready for a new step on your #cybersecurity journey? ?? ?? Check out this blog to learn how the OpenSSF #GUAC project uses SBOMs (Software Bill of Materials) to build a constellation of security insights! ??? ?? When you know what’s inside your #software, bad actors can’t hide! ???? ?? Whether you’re a #DevSecOps pro or just getting started, this post is packed with insights to boost your #security game. ???? ?? Read it here: https://lnkd.in/g99ns4PE #SBOM #SoftwareSecurity #TransparencyMatters

?? SBOMs: It’s Not Just About Generating Them—Now, Let’s Compare If you’ve started producing Software Bills of Materials (SBOMs)—great! But what comes next? Comparing SBOMs is the next critical step in securing your #softwaresupplychain. In our latest blog, we dive into why and how to compare #SBOMs to track changes, detect risks, and ensure consistency across software versions. ?? Why SBOM comparison matters: ?? Identify new or removed components for better change management. ?? Detect #security risks introduced between versions. ?? Maintain compliance by ensuring transparency in evolving #software. This is the second stop in our SBOM Journey series, where we unpack the practical steps of using SBOMs effectively. ?? Read the full blog to learn more: https://lnkd.in/gs9vMb9v #SoftwareSecurity #CyberSecurity #DevSecOps #SupplyChainSecurity #OpenSource

?? Do you use the tj-actions/changed-files #GitHub Action? A compromise over the weekend affected all tags. If you’re not pinning your #dependencies by hash, you’re at risk for these kinds of attacks. We recently wrote about strategies for managing your dependency pins: https://lnkd.in/gCASj4hw. For more on the incident ?? https://lnkd.in/dmmK5UvJ #CyberSecurity #SoftwareSupplyChain #SoftwareSupplyChainSecurity

?? Happy St. Patrick's Day! ?? ?? To celebrate and have some fun, we're kicking off the week with a #softwaresupplychain limerick: A dev built an app, slick and grand, ?? But his #dependencies got out of hand. ???? A platform that blends, ??? No dev workflows to bend, ?? Kusari helped the org take a stand. ?? It pinpointed #threats in a flash, ? No #CVEs slipped through the stash. ???? With tracking so tight, ?? And updates just right, ? Production stayed secure—what a smash! ?? ?? Come have more fun with us at #KubeCon EU in #London! Tuesday, April 1 is the #DevSecOnTheRocks party (be sure to RSVP!) ?? + plenty of conversations and connections at the conference. See more here ?? https://lnkd.in/gmRSVwFM #SoftwareSupplyChainSecurity #DevSecOps?#CyberSecurity #OpenSource #GUAC

Time to celebrate the world’s most delicious irrational number!?Just like π never ends, #software security is an ongoing process. It’s a constant cycle of monitoring, auditing, and improving; not a one-and-done task. This #PiDay, make an appetizing commitment to infinite #security loops, #zerotrust principles, and a resilient #softwaresupplychain. Grab a three point, one fork and an #SBOM because whether it's pie or security, you always want to know what's inside. ???? ?? Oh, while you're eating....check out the next blog tracking the Whiskey Tasting Foundation's software supply chain security journey ?? https://lnkd.in/gs9vMb9v #seriouspidayhumor #cybersecurity #devsecops

?? Starting Your #SBOM Journey: Why & How to Begin Software #security isn’t just about fixing vulnerabilities—it’s about visibility, transparency, and trust. That’s where data come in, and the most known format for that is a Software Bill of Materials (SBOMs). In our latest blog, we break down the fundamentals of SBOMs—what they are, why they matter, and how organizations can start generating them effectively. ?? Key takeaways: ? SBOMs provide a detailed inventory of #software components, helping with security, #compliance, and #riskmanagement. ? Producing an SBOM is the first step toward securing your #softwaresupplychain. ? There’s no one-size-fits-all approach—adopting SBOMs is a journey that evolves with your security needs. This is just the beginning! ?? Watch for more of this series: we’ll explore the challenges, best practices, and real-world applications of SBOMs. Check out the full blog to start your journey: https://lnkd.in/giHVwJum #SBOM #SoftwareSecurity #CyberSecurity #SoftwareSupplyChainSecurity #OpenSource #OpenSourceSoftware #DevSecOps #CISO