NPM Package Compromise and What Recent Exploits Teach Us About Threat Intelligence Overload

Explore the persistent security challenges facing modern software development in this 34-minute cybersecurity webinar from Red Canary's Office Hours series. Examine the ongoing threat of malicious NPM packages and their impact on the developer supply chain, drawing insights from recent research and real-world compromises. Analyze the critical problem of threat intelligence overload that security professionals face daily, using current examples like ESXi hacking campaigns and Microsoft SharePoint vulnerabilities to illustrate how organizations can become overwhelmed by the constant stream of security alerts and advisories. Learn practical approaches to managing and prioritizing threat intelligence effectively while understanding the broader implications of open-source software security risks. Gain valuable perspectives on balancing comprehensive security awareness with actionable intelligence that doesn't paralyze decision-making processes.