Blog | ReversingLabs | Software Bill of Materials (SBOM) (2)

June 15, 2023

CISA SBOM-a-rama tackles challenges: 5 key takeaways

The challenges — and also the promise — of software bills of materials were on display Wednesday as CISA hosted SBOM-a-rama. Here are five key takeaways.

June 12, 2023

Self-attestation on software security: What development teams need to know

Software vendors who do business with the federal government now have to prove they are practicing basic supply chain security. Here are the requirements.

May 16, 2023

7 obstacles to success with software bills of materials

The path to success for SBOMs is riddled with hurdles. Experts explain key factors that could threaten your investments.

May 10, 2023

Why fear rules when it comes to software bills of materials

In this ConversingLabs talk, Josh Corman, founder of I Am The Cavalry, explains what’s behind industry skepticism around SBOMs .

May 2, 2023

How to operationalize software bills of materials for incident response

Learn why SBOMs are essential for cybersecurity incident response — and how to put them to work.

February 28, 2023

SBOM Automation: The next big step in risk management

Why SBOM automation is the next big step in managing software supply chain risk.

February 13, 2023

Why knowing the "ground truth" is key to software security

Software bills of materials (SBOMs) deliver a ground truth for software teams. Here's how they can protect their supply chains.

January 30, 2023

Go beyond Software Bills of Mediocrity

SBOMs could become Software Bills of Mediocrity. But not if we can agree on their value for software supply chain security. Chris Romeo explains.

January 18, 2023

Why you should get out in front of software security requirements

Get out in front of new compliance requirements for a competitive advantage. Here's what your software organization needs to know.

December 1, 2022

Log4j one year in: Vulnerability fuels attacks — and a new urgency for software supply chain security

One year ago, a vulnerability in Apache’s Log4j turned the security world on its ear. What has changed since then? Here are the key takeaways from Log4Shell's legacy.