Tag: VEX

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently released a guide that consolidates relevant software assurance guidance and frameworks into a single document and enables stakeholders to navigate through these requirements in a clear, concise manner. The Software Acquisition…

NetRise announced support for creating Vulnerability Exploitability eXchange (VEX) documents to help organizations track and convey risk associated with the software they are manufacturing or consuming. The XIoT security firm now offers VEX, enhanced asset extraction and analysis, and new…

Organizations across the industrial cybersecurity space are constantly dealing with challenges including software breaches, hardware vulnerabilities, supply chain compromises, and zero-day exploits. These cyber-threats often stem from adversarial attackers, including state-sponsored hackers, specifically targeting critical infrastructure installations, manufacturing facilities, and…

A significant rise in cybersecurity threats and attacks, particularly targeting software supply chains, has led to heightened scrutiny and a pressing need to enhance the resilience of supply chains for software utilized across government and critical infrastructure sectors. Any vulnerability…

U.S. security agencies published a cybersecurity technical report (CTR) that expands on a June 2023 memo from the Office of Management and Budget (OMB). The memo focuses on strengthening the security of the software supply chain, including open-source software (OSS)…