2021-09-16 News A new type of supply-chain attack with serious consequences is flourishing | Ars Technica — arstechnica.com New dependency confusion attacks take aim at Microsoft, Amazon, Slack, Lyft, and Zillow. Introducing sigstore: software signing for the masses | Red Hat Emerging Technologies