Topics of Interest:  Security begins with secure development environments - V. Verma • S. Coochin
Channel: OWASP Foundation
Date: 06/01/2022

Topics of Interest - Security begins with secure development environments

SPEAKER
Vandana Verma • Steve Coochin

ABSTRACT
We have been witnessing an ever-growing amount of supply chain security incidents in the wild. And now, those incidents are starting to extend to the place where developers spend most of their time: their integrated development environment, and specifically the Visual Studio Code IDE.

Recently, Snyk has discovered and disclosed vulnerabilities that pose a real and imminent threat to developers who use these extensions. The potential compromise is so significantly severe that a remote code execution on a developer’s machine is possible by simply tricking the developer to click a link.

Managed by the OWASP® Foundation
https://owasp.org/