News
This Week in SBOMs: PHP2Shell, a Wave of Poisoned Releases, ENISA's SBOM Advisory and Germany's CRA Law
Welcome to the inaugural This Week in SBOMs, a weekly survey of developments within software security, regulation and standards, viewed...
Cowboy Neil
•
Oct 23. 2026
Read more →Announcement
Announcing sbomify v26.7.1: The One That Says "Not Affected"
An SBOM tells you what is in your software. A vulnerability scanner tells you which of those components have known CVEs. Neither answers the...
Viktor Petersson
•
Jul 30. 2026
Read more →Announcement
Announcing sbomify v26.7.0: The One That Gets Quantum-Ready
Most of the SBOM world is focused on one question: what software am I shipping? v26.7.0 adds a second question that is about to matter a...
Viktor Petersson
•
Jul 7. 2026
Read more →Education
What Is a CBOM? The Cryptography Bill of Materials Explained
Organizations know what software libraries they depend on – or at least they should, if they maintain SBOMs. But ask most organizations what...
Cowboy Neil
•
Apr 10. 2024
Read more →