The challenges — and also the promise — of software bills of materials were on display Wednesday as CISA hosted SBOM-a-rama. Here are five key takeaways.
Software vendors who do business with the federal government now have to prove they are practicing basic supply chain security. Here are the requirements.
One year ago, a vulnerability in Apache’s Log4j turned the security world on its ear. What has changed since then? Here are the key takeaways from Log4Shell's legacy.
At the Forrester Security & Risk Forum, ReversingLabs Field CISO Matt Rose presents about what information an SBOM provides — and how it can be put to good use.
Get the best of RL Blog delivered to your in-box weekly to stay up to date on key trends, analysis and best practices across threat intelligence and software supply chain security.
