Call us now:
A fundamental flaw in session authentication. One understands that cybersecurity is difficult, but when you develop products and services for work management, IT service management and IT and Dev Ops security is a core requirement. At what point does a security flaw such as this expand into a supply chain risk? This is a reason why regulators in the U.S and EU are moving to require ICT providers to continually validate cybersecurity risk management, if they wish to sell their products and services in their countries.
Unfortunately if correct this is a serious basic flaw and demonstrates the challenges faced by the software industry in ensuring that their products and services are secure. Fortunately in this case the target is an Australian Firm (Atlassian) and the Australian government is moving quickly to regulate cybersecurity. With this in mind maybe they will add regulation similar to that proposed by the EU Cyber resilience Act (CRA), requiring cybersecurity certification, vulnerability assessment and incident management reporting to be in place ahead of selling products in the EU? Or similar legislation being proposed by the U.S.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #cyberlaw
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7009075344066412544