The U.K. Department for Science, Innovation and Technology released its voluntary Software Security Code of Practice to help software developers improve the security and resilience of their products. The goal of the code is to prevent software supply chain attacks and features 14 principles software vendors are expected to implement as baseline software security and resiliency measures. Meanwhile, the National Cyber Security Centre announced the government would develop passkey technology across digital services as an alternative to SMS-based verification.
Full story