#sbom
#sbom
[ follow ]
#software-supply-chain
fromSecuritymagazine
5 months agoInformation security
CISA Issues Software Bill of Materials Draft, Encourages Public Comments
Updated minimum elements for SBOMs guide standardized, machine-readable SBOM generation and sharing to improve software supply chain transparency and risk-informed cybersecurity decisions.
fromDeveloper Tech News
4 days agoWhite House rescinds software security compliance mandates
The Office of Management and Budget (OMB) issued Memorandum M-26-05 (PDF) which officially revokes the 2022 policy known as M-22-18 and its 2023 companion policy, M-23-16. This reversal alters the governance landscape for enterprise architects and platform engineers who service federal contracts or align with federal standards. The previous directives mandated specific secure software development practices, including the widespread generation and maintenance of Software Bills of Materials (SBOMs).
US politics
fromInfoWorld
1 week agoGitLab devsecops survey finds progress, new priorities
Results of the survey, conducted in April, have been compiled into GitLab's 2024 Global DevSecOps Report, which was announced June 25. Among the findings, 78% of respondents said they are currently using AI in software development or plan to in the next two years, an increase from 64% of respondents who said they were using or planning to use AI in development last year.
Software development
Information security
fromSecurityWeek
4 months agoNew Guidance Calls on OT Operators to Create Continually Updated System Inventory
OT organizations must build and maintain definitive, continually updated records using asset inventories, SBOMs and prioritized processes to enable holistic risk assessment and controls.
fromSecuritymagazine
5 months agoReport Reveals Gap Between AI Use and AI Security In Embedded Software
The State of Embedded Software Quality and Safety 2025 from Black Duck reveals a disconnect between the organizational use of AI and AI security. The embedded software landscape is transforming, largely driven by AI, with 89.3% of organizations already utilizing AI coding assistants and 96.1% integrating products with open source AI models. However, 21.1% of organizations still lack confidence in their capabilities to prevent AI from opening the door to vulnerabilities.
Software development
[ Load more ]