News
Call for Views on the Code of Practice for Software Vendors: Ensuring Security and Resilience
The UK government has launched a call for views on a new voluntary Code of Practice for Software Vendors. This initiative aims to enhance...
Compliance
Harnessing ISO 27001 and SBOMs for Enhanced Information Security Management
Introduction to ISO 27001 As businesses navigate the complex landscape of cyber threats, ISO 27001 emerges as a vital standard for...
Education
What Is OpenSSF? Scorecards, SLSA, and the Open Source Security Ecosystem
After the Log4Shell vulnerability exposed how a single widely-used open source library could affect hundreds of thousands of organizations,...
Compliance
How SBOMs Streamline SOC 2 Compliance: Insights for the Agile Enterprise
Decoding SOC 2 Compliance for Agile Enterprises For agile enterprises aiming to assure clients that their data is in safe hands, SOC 2...
News
What really happened to XZ?
The article “XZ Backdoor Story Part 1” from Securelist delves into the discovery and analysis of a backdoor found in XZ, which...
Education
Elevate Your Cybersecurity with Our Leading SBOM Management Solution
In an era where digital security is paramount, the recent Executive Order 14028 on Improving the Nation’s Cybersecurity has set a new...
Compliance
NIST Cybersecurity Framework (CSF) 2.0: What It Means for Software Supply Chain Security
In February 2024, the National Institute of Standards and Technology (NIST) released version 2.0 of the Cybersecurity Framework – the most...
Education
What Is a CBOM? The Cryptography Bill of Materials Explained
Organizations know what software libraries they depend on – or at least they should, if they maintain SBOMs. But ask most organizations what...
Education
Demystifying SBOMs: The Backbone of Modern Software Security
When the Log4Shell vulnerability (CVE-2021-44228) was disclosed in December 2021, organizations around the world scrambled to answer a...
Compliance
The Time is Now: Embracing SBOMs in an Era of Enhanced Cybersecurity Standards
When the concept of Software Bills of Materials first entered mainstream cybersecurity discourse, it was largely aspirational – a good...