News
This Week in SBOMs: OpenSSH's musl Hole, APT Swaps Packages, and the CRA Reporting Platform Hits v1.3
This is the third issue of This Week in SBOMs, covering Saturday 31 October to Friday 6 November 2026. Last week was about finding PHP and...
News
This Week in SBOMs: PHP2Shell Goes Live, Brotli Hides Behind Version Numbers, and Alpine's GitLab Scare
Welcome to the second issue of This Week in SBOMs, marking the first time we cover a standard seven-day period: Saturday 24 October to...
News
This Week in SBOMs: PHP2Shell, a Wave of Poisoned Releases, ENISA's SBOM Advisory and Germany's CRA Law
Welcome to the inaugural This Week in SBOMs, a weekly survey of developments within software security, regulation and standards, viewed...
Education
What Is a KEV? Understanding CISA's Known Exploited Vulnerabilities Catalog
A KEV – Known Exploited Vulnerability – is a vulnerability that attackers are exploiting right now. When Apache Log4Shell (CVE-2021-44228)...
News
CISA's Minimum Elements now in Draft
Update, August 2026: This post describes the 2025 public comment draft. The final 2026 Minimum Elements for a Software Bill of Materials...
Compliance
Embracing Cybersecurity with CISA's 'Secure by Design' Initiative
In the ever-evolving landscape of cyber threats, the importance of integrating robust security measures into the earliest stages of software...