What an SBOM is — and why it matters
Software bills of materials have become key to mitigating software threats. Here's what you need to know — and how to put them to work.
Carolynn van Arsdale
Writer, ReversingLabs. Carolynn is a reporter, writer, and researcher in the cybersecurity space. She has written for several publications, such as The Security Ledger and Security Boulevard. She has been involved in podcast and event production, and now produces ConversingLabs, a ReversingLabs podcast. Prior to joining ReversingLabs, Carolynn held communication roles in the non-profit and higher education spaces. Her official title at ReversingLabs is Manager, Content Marketing.
Posts from Carolynn van Arsdale
What an SBOM is — and why it matters
4 takeaways from the MITRE software security panel
With software supply chain attacks ramping up, software bills of materials (SBOMs) are getting the nod from both government and industry experts as a "no brainer."
The Week in Security: Google takes next step on supply chain risk, UK issues software security guidance
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of cybersecurity.
Week in Security: Open source tool used to steal data from defense firm
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond.
The Week in Security: Bill tasks CISA Director with responsibility for open source software security
Welcome to the latest edition of The Week in Security, which brings you the most important headlines from the world and our team across the full stack of security: application security, cybersecurity, and beyond.
From the Labs: YARA Rule for Detecting Nokoyawa
ReversingLabs’ YARA detection rule for Nokoyawa can help you find this ransomware in your environment.
The Week in Security: Is Lapsus$ back in action?
The famous hacking group Lapsus$ appears to be back in action. Also: Russian cyber spies are targeting Ukraine by posing as internet providers.
Iran-backed APT actors utilize CVEs to carry out cyber attacks on critical infrastructure
The Week in Cybersecurity: U.S. mandates federal agencies use secure third-party software tools
A new U.S. federal government memo mandates the federal use of secure third-party software products and services. Also, Twitter whistleblower Mudge Zatko reveals new details of the company’s security practices (or lack thereof) with Congress.