“This is above all the existing open risks of vulnerabilities, misconfigurations, and resource constraints,” said Sunil Varkey, a cybersecurity specialist. “Often, due considerations and priority for security and privacy are sidelined in this rush.”
Enterprises must enforce strict security measures to assess third-party software suppliers, said Keith Prabhu, CEO of Confidis. He stressed the need for strong security practices in the software development lifecycle (SDLC) and effective management of the software bill of materials (SBOM).
“In today’s ‘open source, shared’ world, a lot of vulnerabilities creep into software due to shared libraries provided by third parties,” Prabhu said. “Another common issue is that various software components of the code are not updated as and when new versions are released due to poor management of the SBOM.”
