Securing the Digital Supply Chain

Digital supply chain hacks are in the news again this week with the SQL injection exploit targeting the MoveIt file transfer software. Our thoughts below.

The gory detail is here in the NIST vulnerability database. Suffice it to say that this is an SQL injection attack, which impacts the MOVEit application's web interface. SQL Injection attacks are not particularly clever, and relatively easy to guard against in the sense that if best practice is followed when developing a piece of software, it should not prove vulnerable to such attacks. The trick, of course, is ensuring that best practice is always followed.

Cover photo by Clint Patterson on Unsplash