News
What really happened to XZ?
The article “XZ Backdoor Story Part 1” from Securelist delves into the discovery and analysis of a backdoor found in XZ, which...
Compliance
NIST Cybersecurity Framework (CSF) 2.0: What It Means for Software Supply Chain Security
In February 2024, the National Institute of Standards and Technology (NIST) released version 2.0 of the Cybersecurity Framework – the most...
Education
Demystifying SBOMs: The Backbone of Modern Software Security
When the Log4Shell vulnerability (CVE-2021-44228) was disclosed in December 2021, organizations around the world scrambled to answer a...
Education
Enhancing SBOM Management for Software Buyers with sbomify
CTOs and CISOs responsible for software procurement face a growing challenge: ensuring that the software their organizations depend on is...
Education
SBOM Management for Software Vendors: A Complete Guide to sbomify
Software vendors face growing pressure to provide Software Bills of Materials to their customers. Regulatory frameworks like Executive Order...