Zo kan het alom aanwezige gebruik van opensourcesoftware de veiligheid van de software supply chain bedreigen, gegeven de kwetsbaarheid voor misbruik Dit staat er in het document, waarschijnlijk uit de koker van Microsoft want daar luisteren ze naar. Gaat natuurlijk om log4j wat weinig schade heeft veroorzaakt itt tot het niet genoemde grote closed source incident: solarwinds While there are various types and purposes of software in the software stack, the focus of this section is on open-source software and firmware, as they are ubiquitous across the sector and present unique supply chain security issues. The availability of open-source software has accelerated innovation and provides economic and societal benefits, but it can also pose risks, especially if it is implemented in organizations without robust cybersecurity practices. The most basic challenge with OSS security can be the lack of a single responsible entity to help organizations find or fix a security issue. There is no responsible entity to ...