What SolarWinds and Log4Shell Taught Us About Software Supply Chain Security
The post-incident analysis of both SolarWinds and Log4Shell produced similar recommendations: know your software inventory, monitor build pipeline integrity, respond to zero-days faster. Most organizations filed these recommendations, noted them…