https://blog.djvelimir.com/tags/tom-van-den-berg/Recent content in Tom Van Den Berg on BlogHugoen-usTue, 11 Aug 2026 18:08:57 +0200https://blog.djvelimir.com/post/conferences/dotnet-supply-chain-protecting-against-hidden-threats---tom-van-den-berg---ndc-copenhagen-2026/Tue, 11 Aug 2026 18:08:57 +0200https://blog.djvelimir.com/post/conferences/dotnet-supply-chain-protecting-against-hidden-threats---tom-van-den-berg---ndc-copenhagen-2026/<div style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden;"> <iframe allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share; fullscreen" loading="eager" referrerpolicy="strict-origin-when-cross-origin" src="https://www.youtube.com/embed/zwsNQVv3Cu0?autoplay=0&amp;controls=1&amp;end=0&amp;loop=0&amp;mute=0&amp;start=0" style="position: absolute; top: 0; left: 0; width: 100%; height: 100%; border:0;" title="YouTube video"></iframe> </div> <p>Modern software relies heavily on third-party components like open-source libraries and NuGet packages, which can introduce security risks.</p> <p>If you&rsquo;re not carefully managing these dependencies, you could expose your application to vulnerabilities or even malicious code, just like what happened with Log4J.</p> <p>In this session, we&rsquo;ll cover best practices for securing your .NET projects, including using tools like Trivy and NuGet’s security features to scan and monitor dependencies. We’ll also discuss supply chain observability, how to track vulnerabilities and ensure the integrity of your components.</p>