Blog | ReversingLabs | AppSec & Supply Chain Security (26)

October 24, 2022

SBOMs are critical to software supply chain security — but only the first step in your journey

SBOMs are key to software supply chain security. But they are also only the first step on your software supply chain journey. Here's what you need to know.

October 20, 2022

The Week in Security: Attacks on critical infrastructure and the software supply chain take off

This week: Critical infrastructure sectors such as education and aviation are being targeted by cybercriminals. Also: software supply chain attacks have increased by 742% in the past 3 years.

October 20, 2022

SBOMs are coming for medical devices. Prof. Kevin Fu explains what to expect

The medical device sector is under pressure to improve software supply chain security, and software bills of materials (SBOMs) are front and center. ReversingLabs talks with Dr. Kevin Fu of the Archimedes Center at University of Michigan about what to expect.

October 18, 2022

What an SBOM is — and why it matters

Software bills of materials have become key to mitigating software threats. Here's what you need to know — and how to put them to work.

October 17, 2022

4 takeaways from the MITRE software security panel

With software supply chain attacks ramping up, software bills of materials are getting the nod from both government and industry experts as a "no brainer."

October 13, 2022

The Week in Security: Google takes next step on supply chain risk, UK issues software security guidance

This week: Google Cloud announces new solution to tackle software supply chain risk, multiple vulnerabilities in Adobe products could lead to arbitrary code execution, and more.

October 11, 2022

Packagist PHP repo supply chain attack: 3 key takeaways

A PHP repository vulnerability threatened millions of sites. Here's why you need to make an SBOM the first step in your software supply chain security journey.

October 6, 2022

Week in Security: Open source tool used to steal data from defense firm

This week: APT groups targeted a defense industrial base sector organization, why SBOMs are a great “first step,” and more.

October 4, 2022

Gartner: Knowing your software's ingredients is critical to managing risk

With third-party sources — and supply chain attacks surging — Gartner expects adoption of SBOMs to go from less than 5% now to 60% in 2025.

September 29, 2022

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

This week: A new bill tasks the CISA Director with tackling open source software security, a leaked LockBit builder is being used by a new ransomware gang, and more.

September 19, 2022

White House now requires software adhere to NIST standards

The new memo calls on firms selling software to the government to attest to its conformity with NIST security standards. Here's what you need to know.

September 14, 2022

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Here's what you need to know about the new OpenSSF npm security best practices.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Industry

Partners

Alliances

Resources

Company

Events

Press

AppSec & Supply Chain Security (26)

SBOMs are critical to software supply chain security — but only the first step in your journey

The Week in Security: Attacks on critical infrastructure and the software supply chain take off

SBOMs are coming for medical devices. Prof. Kevin Fu explains what to expect

What an SBOM is — and why it matters

4 takeaways from the MITRE software security panel

The Week in Security: Google takes next step on supply chain risk, UK issues software security guidance

Packagist PHP repo supply chain attack: 3 key takeaways

Week in Security: Open source tool used to steal data from defense firm

Gartner: Knowing your software's ingredients is critical to managing risk

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

White House now requires software adhere to NIST standards

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Topics

Special Reports

The 2025 Software Supply Chain Security Report

Upcoming Webinars

ConversingLabs

AppSec & Supply Chain Security (26)

Topics

Follow us

Subscribe

Special Reports