CFOtech US - Technology news for CFOs & financial decision-makers
United States

Software Bill of Materials (SBOM) Stories

American Stories

Software Bill of Materials (SBOM) stories

Federal cybersecurity report flags supply chain gaps
Data Protection

Federal cybersecurity report flags supply chain gaps

Many defence suppliers still lack visibility into software risks, as more than a quarter reported a supply chain compromise last year.

By Mark Tarre • 4 min read • Fri, 26th Jun 2026

Global Stories

Software Bill of Materials (SBOM) stories

CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • Fri, 17th Jul 2026
Checkmarx named leader in Gartner supply chain quadrant
Application Security

Checkmarx named leader in Gartner supply chain quadrant

Enterprise buyers are treating software supply chain security as a standalone priority as Gartner creates a dedicated Magic Quadrant for the category.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 25th Jun 2026
JFrog named leader in Gartner's software security quadrant
Hybrid Cloud

JFrog named leader in Gartner's software security quadrant

The recognition comes as firms scramble to secure software pipelines, open-source code and AI assets against rising supply chain attacks.

By Mark Tarre • 4 min read • Tue, 23rd Jun 2026
Manifest tool boosts SBOMs for critical C & C++ code
Space

Manifest tool boosts SBOMs for critical C & C++ code

Manifest unveils SBOM generator for unmanaged C and C++ code, tackling critical supply chain blind spots in embedded and safety systems.

By Mark Tarre • 4 min read • Sat, 14th Mar 2026
Azul boosts Java security with improved runtime vulnerability detection
DevOps

Azul boosts Java security with improved runtime vulnerability detection

Azul's Intelligence Cloud now cuts Java security false positives by up to 99%, using runtime data to boost vulnerability detection accuracy for DevOps teams.

By Catherine Knowles • 4 min read • Fri, 13th Jun 2025
Massive attack on GitHub affects over 23,000 repositories
Supply Chain

Massive attack on GitHub affects over 23,000 repositories

A recent cyber attack has compromised over 23,000 GitHub repositories, raising alarms over software supply chain security and the exploitation of trusted components.

By Sean Mitchell • 3 min read • Thu, 20th Mar 2025
Sonatype report highlights rising threats in open source
Supply Chain

Sonatype report highlights rising threats in open source

Sonatype's latest report reveals open source software now comprises 90% of modern development, with a staggering 156% rise in malicious packages.

By Catherine Knowles • 3 min read • Tue, 15th Oct 2024
AI-generated code surge may increase software flaw risk
DevOps

AI-generated code surge may increase software flaw risk

Harness raises alarm over increased developer toil and security risks from AI-generated code, as 90% of developers adopt AI tools to speed up software delivery.

By Shannon Williams • 3 min read • Fri, 14th Jun 2024
ForAllSecure unveils AI-powered SBOM tool Mayhem to target real threats
Application Security

ForAllSecure unveils AI-powered SBOM tool Mayhem to target real threats

ForAllSecure reveals new AI-powered tool, Mayhem, a dynamic software bill of materials tool that proactively battles exploitable application vulnerabilities.

By Catherine Knowles • 3 min read • Wed, 8th May 2024
Red Hat updates trusted software supply chain, bolsters security
Supply Chain

Red Hat updates trusted software supply chain, bolsters security

Red Hat, a player in open-source solutions, enhances its trusted software supply chain with new security components poised to simplify and intensify cryptographic system protection and threat analysis.

By Kaleah Salmon • 3 min read • Tue, 23rd Apr 2024
Software supply chain security: Finding the weakest link
Advanced Persistent Threat Protection

Software supply chain security: Finding the weakest link

Security in the software supply chain stands on shaky ground, as reliance on prebuilt and open-source code leads to rampant vulnerabilities and 91% of firms report incidents within the last year.

By Richard Sorosina • 5 min read • Mon, 8th Apr 2024
CAST Highlight tops user satisfaction in G2's SBOM software rankings
Document Management

CAST Highlight tops user satisfaction in G2's SBOM software rankings

CAST Highlight has been ranked top for user satisfaction in G2's SBOM management category, affirming its efficacy as a streamlined, cloud-based Software Bill of Materials (SBOM) solution.

By Catherine Knowles • 2 min read • Thu, 4th Apr 2024
Zombie APIs: the resident evil in too many businesses
DevOps

Zombie APIs: the resident evil in too many businesses

The unchecked use of Zombie APIs in businesses has underscored a rising cybersecurity threat, with attackers exploiting these neglected interfaces and costing firms up to $75bn annually.

By Matias Madou • 5 min read • Fri, 29th Mar 2024
DigiCert forecasts digital trust trends for APAC in 2024
IoT Security

DigiCert forecasts digital trust trends for APAC in 2024

DigiCert unveils the key digital trust trends for APAC in 2024, highlighting the challenges companies might face and cybersecurity shifts for the coming year.

By Imee Dequito • 3 min read • Wed, 29th Nov 2023
The IT industry is stalling on SBOMs when it should be working on best practice
Open source

The IT industry is stalling on SBOMs when it should be working on best practice

SBOMs will be key to dealing with the next big vulnerability and incredibly useful in the fight to minimise the effects of smaller weaknesses.

By Joey Stanford • 5 min read • Tue, 24th Oct 2023

Stories from Other Regions

Software Bill of Materials (SBOM) stories

Chainguard joins AWS Security Hub for supply chain
Malware

Chainguard joins AWS Security Hub for supply chain

AWS customers can now buy Chainguard Libraries through Security Hub Extended, as open-source dependency attacks push firms to tighten supply chain checks.

By Sofiah Nichole Salivio • 4 min read • Thu, 6th Aug 2026