A Software Bill of Materials (SBOM) is a document that lists all of the software components and their versions that are used in the organization’s revenue generating product. …

In this article, we will provide a breakdown of the NIST guidance for defending against software supply chain attacks. A software supply chain attack occurs when a cyber threat actor infiltrates a software vendor’s network and employs malicious code to compromise the software before the vendor sends it to its…