Reuters reported this week that two hospitals in England are using blockchain technology to track the storage and supply of COVID-19 vaccines. According to Reuters, this is one of the first such initiatives in the world.
The report stated that the hospitals are using a distributed ledger, a type of blockchain that uses independent computers, to share, replicate, and synchronize data in electronic ledgers in real time.
The hope is that the use of these blockchain systems will assist in monitoring the status of vaccines and keep track of vaccine shipments “from factory freezer to shots in the arm.”
Development and Operations (DevOps) teams are often pressured by executives and sales teams to get software products completed and out the door and into the market as quickly as possible so the products can generate income. Often, security is not the highest priority for DevOps, as adding security features may affect the performance of the software or add time to the deployment schedule.
The SolarWinds hack is a crucial reminder to DevOps teams to build security into software products, and to complete due diligence on the security protocols regarding the DevOps teams of vendors that make components used by software manufacturers, such as JetBrains.
JetBrains is a Czech-based company that developed a product called TeamCity, which Reuters reports is “used by tens of thousands of customers to construct other software.” According to other news reports, the FBI is investigating whether the Russians hacked into JetBrains’ TeamCity DevOps tool in order to infect SolarWinds’ Orion software [see related post]. If your DevOps team is using TeamCity, it may present another risk associated with the SolarWinds incident that has much broader impact on other software development.
Check with your DevOps team to see what kind of security due diligence they are completing on the vendors that are providing the component parts of the software they are developing, including JetBrains. If no due diligence is being done, this is a perfect time to start.