Edwin Kwan

I've just written about a Halloween spooky first hand experience with a compromised third party attack. Your Site Was Hacked, and You Never Knew About It: My Real-Life Encounter with a Supply Chain Attack edwinkwan.substack.com/p/your-site-wa…

5 Steps for Securing your Open Source Supply Chain appsecunlocked.substack.com/p/5-steps-for-…

comparing the controls organisations have for code written in-house with the often murky security practices of open-source projects. Episode Link: appsecunlocked.substack.com/p/how-secure-a…

However, this convenience comes with a hidden cost and potential security vulnerabilities. In this episode of AppSec Unlocked, we'll look at the security considerations surrounding open-source libraries

𝗛𝗼𝘄 𝗦𝗲𝗰𝘂𝗿𝗲 𝗶𝘀 𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲? Open-source software is the building block of modern applications. From web frameworks to encryption tools, these readily available components offer developers a wealth of functionality and accelerate development

CrowdStrike Incident - Lessons Learned In DevSecOps and BCP open.substack.com/pub/edwinkwan/…

Are there a lot more assumed trust in global cybersecurity vendors that security professionals assess them with less rigor compared to other vendors? Sharing my thoughts on the recent CrowdStrike incident open.substack.com/pub/edwinkwan/…

Wrote more about it on edwinkwan.substack.com/p/youre-using-… and edwinkwan.medium.com/youre-using-mo…

Everyone in the audience knew that their organisation uses a fair number of open-source components, but they thought that it only makes up a small percentage of their applications ....

My recent conference presentation on open-source security revealed a common theme. Audience members didn’t realise how pervasive open-source is.

🌻 sunflowers

Calm seas

Sydney

Sweet treats at sugar rush bar

Sunflower

Sunrise - loving summer early mornings. Everyone’s out and about doing their morning walks, run, swim and fitness classes.