Defensive Research, Weaponized: The 2025 State of Pipeline Security
December 8th 2025, by François Proulx, VP of Security Research @ BoostSecurity.io TL;DR: 2025...
Here we’ll offer information relevant to developers and security automation for the software supply chain.

This free guide explores the business level risks of the software supply chain and offers examples for how they materialize. We'll review four key risk categories; your developers, 1st party code, 3rd party code and the development infrastructure, and break down specific vulnerabilities and how they're compromised in each category.

Is BoostSecurity right for you? What problem do you solve? Read more in our Executive Summary / At-a-Glance document, in the PDF below.

December 8th 2025, by François Proulx, VP of Security Research @ BoostSecurity.io TL;DR: 2025...
TL;DR: Malicious code caching, dangling commits, pseudo-versions stealthily pointing to...
TL;DR: A routine disclosure unraveled a class of Bot-Delegated Time-Of-Check to Time-Of-Use race...
