🔎 Consistently tracking and addressing material code changes is crucial for AppSec and compliance—especially for highly regulated organizations. 🏦 🚀 Learn what it takes to automate material change detection at scale—without slowing down developers.

Secure your development and delivery to the cloud. Proactively identify, fix, and prevent risks in your modern applications and software supply chains with Apiiro’s Cloud Application Security Platform. 🔒🚀💚 Learn more at https://t.co/bYcGvx4pR4.

🚀 Introducing the Risk Graph Explorer! 🚀 Query all code components, their connections, business impact, and risks across your applications and software supply chains – in a matter of seconds and limited only by your imagination. 🕵️ https://t.co/IvSiupTWxA

1/ Apiiro’s AI Engine discovered yesterday a software supply chain attack, a malicious package in @pypi package manager, which was uploaded on Dec 2nd & targeting Windows users. Once installed, the package pywz, is decoding a base64 string & executing the decoded Python code

3/ We were able to locate 11 @github accounts with repositories that install this malicious package. We notified PyPI about the malicious package and GitHub about the malicious repositories and the suspicious accounts. Technical details 👉