CISA and international cybersecurity agencies have updated the minimum requirements for a Software Bill of Materials (SBOM), significantly strengthening software supply chain transparency. New mandatory elements, such as author digital signatures, hashes, licensing information, and the context of SBOM generation, ensure much better code integrity and traceability. A robust SBOM must map all components and […]
The European Commission has published official guidelines for the application of the Cyber Resilience Act (CRA), helping manufacturers, suppliers, and open-source projects better understand how the law should be applied in practice. The guidance clarifies when software, hardware, and combinations thereof fall under the CRA and when software is considered to be “placed on the […]
The European Commission is launching an action plan to ensure that AI strengthens European cyber resilience rather than posing a security risk. The focus is on the secure deployment of AI, the protection of critical sectors against AI attacks, and the development of European digital sovereignty. To achieve this, an independent evaluation capacity for advanced […]