Software bills of material face long road to adoption
Cybersecurity leaders agree on the need for a standardized recipe list for software, but implementing an effective compliance regime remains a challenge.
Advertisement
Log4j
US Merit Systems Protection Board compromised in Iranian government-linked hack: report
The quasi-judicial agency was hit earlier this year during the attack, according to The Washington Post.
Cyber Safety Review Board ‘moving quickly’ on second report: DHS Under Secretary
Rob Silvers says the board's Log4j review was a successful proof of concept that's already yielded responses from CISA, DHS and industry.
Senators propose open source software risk framework in new bill
The legislation would require CISA to develop a new cybersecurity framework for agencies and critical infrastructure owners and operators.
NSA, CISA release compendium of security practices for software developers
The agencies have worked with industry to develop a set of recommendations that includes more in-depth source code reviews.
DHS board: No one used software inventories to find vulnerable Log4j deployments
Many in government and industry want software bills of materials to be the development compliance standard.
Advertisement
Log4J flaw causing Army to take second look at open source software
Army CIO Raj Iyer says the department is putting "extra effort" into cybersecurity following discovery of the vulnerability last year.
Federal agencies have until Dec. 24 to apply fixes for Log4Shell vulnerability
DHS directives give departments 15 days to respond to critical vulnerabilities of this type.