Install
Secrets, Keys & SBOM
Rotation, KMS/HSM, provenance, and SBOM generation/attestation.
- 7 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Secrets, Keys & SBOM
A Decade of Industrial Grade Linux: How the Civil Infrastructure Platform Is Securing Mission-Critical Systems
21+ hour, 19+ min ago (543+ words) Linux Foundation The global systems that power our communities, from energy grids and transportation networks to water distribution and healthcare systems, are built to last for decades. Yet as physical equipment becomes increasingly software-defined, managing those deployments over multi-decade lifecycles…...
Build It Twice: What Two Host Machines Reveal About Your Embedded Toolchain
4+ day, 2+ hour ago (671+ words) A Test Every Embedded Team Should Run Take a project you actually ship. Check out one commit onto a Linux host and the same commit onto a Windows host. Build both. Flash both. Attach a debug probe to both. Then…...
Stolen Logins Are Driving the Next Wave of Supply Chain Breaches
6+ day, 20+ hour ago (660+ words) In the early months of 2026, three separate incidents made their way through security circles and engineering Slack channels alike. Different companies, different tools, different teams, and yet the same root cause ran through all three: Someone had access they shouldn't…...
Supplier Risk Radar: Predicting Supply Chain Disruption Before It Happens
1+ week, 17+ hour ago (355+ words) 🔍 What the system does Supplier Memory The system maintains historical information such as: Delivery delays and on-time performance Quality issues and defects Price changes and price trends Previous risk scores and alerts Previous disruptions This helps answer: "What has happened…...
Survey: Lack of Confidence in Software Supply Chain Security Runs High
1+ week, 1+ day ago (69+ words) A survey finds 73% are either only moderately confident or not confident in the ability of their tools to prevent attacks....
73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain
1+ week, 3+ day ago (1237+ words) The counts Three products that sit in the software delivery path returned measurable fingerprints in internet-wide scans on 26 September 2026. ZoomEye returned 73,105 results for app="Apache Airflow", 11,673 for app="SonarQube" and 33,837 for app="Nexus Repository". These are application-level matches rather than…...
Why Software Supply Chain Security Is Moving to the Gate
1+ week, 5+ day ago (508+ words) September 24, 2026 by Thijs Feryn March 2026: malicious versions of axios get published directly to npm. May 2026: attackers forge valid provenance for 42 TanStack packages on npm, with 84 malicious versions shipped before detection. August 2026: a worm uses one maintainer’s stolen credentials to self-propagate…...
Security and compliance news for ISVs: September 2026
2+ week, 1+ day ago (238+ words) From a Magento zero-day to a surge of state privacy fines, here's what shaped risk for software leaders this September. If your platform touches e-commerce in any way, whether you build on Magento, integrate with it, or simply sell to…...
LogiGear Launches SBOM Archi in the US to Strengthen Software Supply Chain Security and Support EU CRA Readiness
2+ week, 6+ day ago (351+ words) SAN MATEO, Calif.--(BUSINESS WIRE)--#Compliance--LogiGear, a provider of AI-powered software testing, development and security solutions, today announced the availability of SBOM Archi in the US market. Developed in Japan by AGEST, Inc., SBOM Archi is a software supply…...
DWS Introduces SBOM Archi to Help UK and European Enterprises Strengthen Software Supply Chain Security and Address EU Cyber Resilience Act Requirements
2+ week, 6+ day ago (247+ words) "Software supply chain visibility is becoming an important part of both cyber security and operational resilience," said Kageyuki Nagao, COO of DWS. "Creating an SBOM is only the starting point. The real value comes from understanding the risks, prioritising action…...