"SBOM"—or "software bill of materials"—is one of the hottest new buzzwords in cybersecurity today, and for good reason. Each day brings new headlines about the latest supply chain attack, followed by ...

State and local governments depend on a tangled mix of commercial software, open-source components, cloud services and, increasingly, artificial intelligence (AI). That complexity makes it hard to ...

The Cybersecurity and Infrastructure Security Agency (CISA) has released a draft Minimum Elements for a Software Bill of Materials (SBOM) for public comment. Reflecting the growing maturity of SBOM ...

The U.S. Army issued a software bill of materials (SBOM) policy on Aug. 16, announced Young Bang, principal deputy assistant secretary of the U.S. Army's Acquisition, Logistics and Technology ...

Most supply chain practitioners already understand the value of a Software Bill of Materials. SBOMs give you visibility into ...

Vulnerabilities deep inside widely used software components have led to a push for Software Bill of Materials requirements in federal acquisitions. In this eBook, FCW takes a look at past efforts to ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

The push to create more detailed, reliable, and mature BOMs with sufficient detail and depth to counter supply chain attacks continues to advance with the latest OWASP model. The exponential growth of ...

Python enhancement proposal would incorporate SBOM documents in Python packages as a way to improve dependency tracking and vulnerability analysis. Software bill-of-materials (SBOM) documents would be ...

Securing AI systems remains one of the toughest challenges in enterprise technology today. And the stakes are only getting ...

An audit of the Department of Energy found failures in supply chain risk practices, with multiple contractor sites lacking basic policies, verification mechanisms and visibility into the actual ...