Software Bill of Materials (SBOM)
Securing the AI Supply Chain: What are the Risks and Where to Start? Â
AI supply chain security: Explore the risks of poisoned datasets, compromised open-source libraries, and AI-powered phishing ...
The EU CRA – Treating Cybersecurity as Product Liability
The EU's Cyber Resilience Act (Regulation 2024/2847) shifts cybersecurity responsibility upstream. Explore the March 2026 guidance on secure-by-design requirements, software bills of materials (SBOM), and the impact on U.S. manufacturers ...
CISA SBOM-a-rama: 4 key takeaways for software security teams
Since 2021, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has been a proponent of software bills of materials (SBOMs) as a tool that can help secure the software supply chain. The ...
SBOMs and your org: Go beyond checkbox security to manage risk
Software bills of materials (SBOMs) have moved to the forefront of the battle to protect software pipelines, advanced by heightened awareness of the need for software supply chain security, as well as ...
The SBOM has a long history — but what’s next is what matters
Software bills of materials (SBOMs) are having their day — they're even government-mandated at times. In September 2023, the U.S. Food and Drug Administration issued its final version of “Cybersecurity in Medical ...
What’s in your commercial software?
The concept of software supply chain security (SSCS) has taken center stage over the past few years in the wake of new federal policies, increases in the threats to open-source platforms, and ...
Supply chain risk make software stack visibility essential
Visibility into the software that organizations and their suppliers use has become a cornerstone of supply chain security. That's the bottom line from a recent panel discussion among experts at a webinar ...
Secure by Demand: Going Beyond Questionnaires and SBOMs
CISA’s Secure by Demand guidance provides a list of questions that enterprise software buyers should ask software producers to evaluate their security practices prior to, during and after procurement. It’s a good ...
Why shareable SBOMs are essential for software security
Software bills of materials (SBOMs) have long been seen as the technical foundation for opening up visibility into enterprise software supply chains. So far, the work has been focused on building the ...
OWASP looks to future-proof SBOMs with CycloneDX 1.6
The OWASP Foundation has released a new version of its CycloneDX standard for software bills of materials (SBOMs) that includes a cryptographic bill of materials (CBOM), a machine-readable approach to managing SBOMs ...
