Zach Marks – Medium

Published in Ochrona Security

·Aug 30, 2021

Analyzing Trends in Python Package Vulnerabilities

Overview Securing the software supply chain has been a hot topic of conversation as of late (read: Malicious PyPI Packages Steal Credit Cards and Inject Code; or the White House’s Executive Order to Protect Software Supply Chains). The need for proactive open-source package management has never been more prevalent, and…

Python

5 min read

Published in Ochrona Security

·Apr 5, 2021

What is Open-Source Dependency Management and Why Should I Care?

Let’s start with an analogy In today’s world, building applications is a lot like building a house. If you’re building a house, you start by going to a store and purchasing materials that serve as the foundation of your house. For simplicity, let’s take windows, doors, and countertops as an…

Cybersecurity

4 min read

What is Open-Source Dependency Management and Why Should I Care?

Published in The Startup

·Sep 21, 2020

“So What?” — Telling the Business Story of Security Vulnerabilities

Contextualizing Security Vulnerabilities As a former penetration tester turned product-focused security professional, one of the most important things I’ve realized is that translating security risk to business impact is crucial in making your work resonate. Often times, the buyer of whatever security offering you’re selling will not care about the…

Cybersecurity

4 min read

“So What?” — Telling the Business Story of Security Vulnerabilities