Security firm reveals weak links in software supply chain

11/20/2012 | ZDNet

The software industry lacks a comprehensive program for testing its products for security vulnerabilities, according to a report from Veracode, which found most enterprises blindly trust their third-party software providers to get it right. The report found that less than 20% of companies have requested a code-level security test from a software vendor, part of a disconnect between enterprise and industry standard compliance.

View Full Article in:

ZDNet

Published in Briefs: