top of page

InvisiRisk Blog Posts


The Great NPM Heist – What Happened and How InvisiRisk Protects You
Integrating InvisiRisk Build Application Firewall into your development workflow is a practical way to ensure that even if attackers try to slip malware into NPM or Git, your build process will catch it and shut it down before any damage is done.

Pranesh Shrestha
Sep 196 min read
Â
Â
Â


Why Your Secrets Faucet is Still Leaking
InvisiRisk BAF is an advanced security platform that strengthens software build processes against supply chain threats. It offers real-time defense by applying default security policies that block known vulnerabilities, ensure the use of trusted sources, and restrict unauthorized activities during builds.

InvisiRisk, Inc.
Apr 303 min read
Â
Â
Â


Don't Let a Typo Sink Your Ship: How InvisiRisk BAF Fights The Silent Threat of Typosquatting
Typosquatting attacks are a silent but significant threat in the software supply chain. Relying solely on manual vigilance is no longer sufficient. Our Build Application Firewall (BAF) is designed with a robust set of default security policies to protect your applications from various vulnerabilities.

InvisiRisk, Inc.
Apr 174 min read
Â
Â


Could Standard Security Attestations, Powered by InvisiRisk, Have Shielded the NHS supplier from the £3m ICO Fine?
The ICO fine levied against , Advanced Computer Software Group Ltd, serves as a stark reminder of the importance of supply chain security.

InvisiRisk, Inc.
Apr 32 min read
Â
Â


CVE-2025-29927: Middleware Authorization Bypass in Next.js and How InvisiRisk BAF Prevents it
InvisiRisk BAF’s layered, real-time security stops attacks like the Ultralytics/Action Compromise

InvisiRisk, Inc.
Apr 13 min read
Â
Â


How InvisiRisk BAF Effectively Mitigates GitHub Actions Supply Chain Attacks Like the Ultralytics/Action Compromise
InvisiRisk BAF’s layered, real-time security stops attacks like the Ultralytics/Action Compromise

InvisiRisk, Inc.
Mar 274 min read
Â
Â


In-Depth Analysis: How InvisiRisk BAF Effectively Mitigates GitHub Actions Supply Chain Attacks Like the tj-actions/changed-files Compromise (CVE-2025-30066)
InvisiRisk BAF is a security solution specifically designed to protect the software build process from various threats.

InvisiRisk, Inc.
Mar 264 min read
Â
Â


Beyond Open-Source Vulnerability Tracking: Comprehensive Software Supply Chain Security with InvisiRisk
By addressing these broader risks, InvisiRisk helps organizations deliver secure software faster and with greater confidence.

InvisiRisk, Inc.
Dec 12, 20242 min read
Â
Â
Â


Achieve Software Compliance with InvisiRisk
InvisiRisk is an easy to use, scalable, and secure tool that can help organizations to achieve software security compliance.

InvisiRisk, Inc.
Sep 9, 20233 min read
Â
Â
bottom of page