SecurityWeek reports that new guidance on open source software management and software bills of materials consumption among software vendors and suppliers has been introduced by the Cybersecurity and Infrastructure Security Agency, the National Security Agency, and the Office of the Director of National Intelligence in a bid to better protect the software supply chain. Aside from detailing SBOM processing adoption and risk evaluations for identified software flaws, the guidance also expounds on vulnerability exploitation prevention measures and new SBOM requests for updated software.

Source: SC Magazine