I think we're going to talk less about: "Do you have an SBOM?" and more about: "Can you maintain an accurate SBOM across the entire product lifecycle?" Generate → release → update → vulnerability → remediation → new release. The lifecycle is the hard part. #sbom #eucra

Cat Edelveis (Bellsoft): hardened images ship with provenance and an SBOM, so you can verify what you shipped. Full episode: piped.video/live/xqbMKNL40Vk #Provenance #SBOM

【サイバーセキュリティの歴史を振り返る】 SBOM（ソフトウェア部品表）は、なぜ必要になったのか？ ソフトウェアの中身が見えない時代から、部品を把握し、脆弱性を管理する時代へ sbom-security.jp/history/sbo… #SBOM #サイバーセキュリティ #ソフトウェアサプライチェーン #脆弱性管理 #CRA

CRA compliance shouldn't start with a checklist. It should start with a question: Can we explain the security state of every product we have shipped? If the answer is no, adding another compliance document won't fix the underlying problem. #sbom #cra #eucra

Does an SBOM reduce supply chain risk or simply document dependencies? Henry Patishman of Regula explains what vendors should demonstrate to prove its value in @ForbesTechCncl. Read more: forbes.com/councils/forbeste… #Cybersecurity #Innovation #SBOM #SupplyChain #RiskManagement

2026.10.11 SBoM 第一ヘアピンでの流し撮り。 こちらはオートフォーカスレンズで撮影しました。 当たり前ですが、新しいレンズは初心者にも優しいですね。 #sbom #スーパーバトルオブミニ #筑波サーキット #classicmini #クラシックミニ

Hot take: Generating an SBOM is becoming a commodity. The harder problems are: → keeping it connected to product versions → mapping vulnerabilities to releases → knowing what needs remediation → keeping the evidence That's where SBOM becomes Product Security. #SBOM #EUCRA

#CRA #SBOM and software supply chain

📦 New CVE drops. Are you even using it? Your SBOM should know SBOM Explained: CycloneDX vs SPDX, VEX and Why Buyers Ask 👉 prioriq.ai/en/blog/sbom-expl… ▶️ piped.video/shorts/bnO-kfcrg… #Cybersecurity #SBOM #SupplyChain

📦 SBOM explicada: CycloneDX frente a SPDX, VEX y por qué la piden Qué contiene una SBOM, CycloneDX frente a SPDX, por qué importan la Orden Ejecutiva 14028 y el Cyber Resilience Act… 👉 prioriq.ai/es/blog/sbom-expl… ▶️ piped.video/shorts/bnO-kfcrg… #Ciberseguridad #SBOM #SupplyChain

137 components, one audit: what an SBOM check actually finds finextra.com/blogposting/331… #opensource #softwarecoposition #sbom @Finextra

マニュアルフォーカスで金網越しにS字を走るミニにピントを合わせ、金網を目立たなくしてみました。 難しかったけど、なんとか言われなければ気づかないレベルにはなったかな…？ SBoMならではの画が撮れて嬉しい。 #スーパーバトルオブミニ #SBoM #クラシックミニ #筑波サーキット

Do you really know what’s inside your products? ONEKEY enables SBOM transparency, vulnerability management and continuous monitoring in one platform. Discover more at it-sa, booth 9-346: onekey.com/resource/meet-one… #SBOM #Cybersecurity #ONEKEY

🚀 The new ndaal SBOM Auditor demo is here! Explore SBOMs and strengthen your software supply-chain security workflow. 🌐 sbom.ndaal.eu/ 🦀 crates.io/crates/sbom-audito… Open source. Built with Rust. #ndaal #sbom #triage #opensource

Is your software product ready for the Cyber Resilience Act? infoworld.com/article/423226… #opensource #securebydesign #sbom @InfoWorld

package.json says ^4.17.0. The build shipped one exact version, and only that one matches an advisory. If your SBOM was built from the manifest, it describes an intent, not an artifact. offensive360.com/software-su… #SCA #SBOM

Software-Stücklisten (SBOM) sind ein Schlüssel zur CRA-Compliance. Sie schaffen Transparenz über Softwarekomponenten, erleichtern das Schwachstellenmanagement und helfen, Sicherheitsrisiken frühzeitig zu erkennen. datensicherheit.de/eu-cra-sb… #CRA #SBOM #Cybersecurity

Build and inspect multi-platform Docker images with Buildx, SBOMs, and SLSA provenance. See what published attestations reveal and what they don't prove. #dockerbuildx #sbom...Show more

／ 📢お知らせ ＼ CRA報告義務開始後、SBOMをどう活用するか。 SCAによる可視化から脆弱性対応プロセス構築まで実務ポイントを解説。 10/28オンライン開催。 #CRA #SBOM #サイバーセキュリティ #企業公式相互フォロー

Their research with @torresariass found that, across 5K+ DockerHub images, a median of 21% of files in a container go completely untracked by its #SBOM - which rises to 37% when weighted by file count. Most Software Composition Analysis (SCA) tools never look at them! (2/5)