News

Category · All categories · Blog

News

This Week in SBOMs: OpenSSH's musl Hole, APT Swaps Packages, and the CRA Reporting Platform Hits v1.3

This is the third issue of This Week in SBOMs, covering Saturday 31 October to Friday 6 November 2026. Last week was about finding PHP and...

Cowboy Neil • Nov 6. 2026
Read more →

News

This Week in SBOMs: PHP2Shell Goes Live, Brotli Hides Behind Version Numbers, and Alpine's GitLab Scare

Welcome to the second issue of This Week in SBOMs, marking the first time we cover a standard seven-day period: Saturday 24 October to...

Cowboy Neil • Oct 30. 2026
Read more →

News

This Week in SBOMs: PHP2Shell, a Wave of Poisoned Releases, ENISA's SBOM Advisory and Germany's CRA Law

Welcome to the inaugural This Week in SBOMs, a weekly survey of developments within software security, regulation and standards, viewed...

Cowboy Neil • Oct 23. 2026
Read more →

News

CISA's Minimum Elements now in Draft

Update, August 2026: This post describes the 2025 public comment draft. The final 2026 Minimum Elements for a Software Bill of Materials...

Viktor Petersson • Aug 23. 2025
Read more →

News

Unpacking Raspberry Pi's Built‑In SBOM Magic

When the Raspberry Pi Foundation quietly unveiled rpi‑image‑gen, most of the headlines focused on how it streamlines custom image creation....

Viktor Petersson • Apr 17. 2025
Read more →

News

Exploring the Future of Software Security: Join Us at BSides Bristol

This weekend marks an exciting event for the cybersecurity community – BSides Bristol is officially kicking off! We’re thrilled to be a part...

Viktor Petersson • Aug 26. 2024
Read more →

News

Get the latest SBOMs from the top 15 most popular images on Docker Hub

Most companies that use Docker also use Docker Hub in some capacity. Have you ever wondered how secure these images are? In our article...

Cowboy Neil • Jun 4. 2024
Read more →

News

Call for Views on the Code of Practice for Software Vendors: Ensuring Security and Resilience

The UK government has launched a call for views on a new voluntary Code of Practice for Software Vendors. This initiative aims to enhance...

Cowboy Neil • May 26. 2024
Read more →

News

What really happened to XZ?

The article “XZ Backdoor Story Part 1” from Securelist delves into the discovery and analysis of a backdoor found in XZ, which...

Cowboy Neil • Apr 13. 2024
Read more →