Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data

This report discusses challenges security teams face in effectively using Software Bill of Materials (SBOM) data to prevent supply chain attacks. It highlights that the lack of a governance-driven intelligence layer to interpret SBOM and Vulnerability Exploitability eXchange (VEX) data limits the ability to make clear security decisions. The issue is not a specific vulnerability but a gap in security process and tooling that may contribute to increased supply chain risks.

• securityweek.com/are-sboms-failing-supply-chain-attacks-rise-as-security-teams-struggle-with-sbom-data/ (opens in a new tab)