CISA and NSA, along with 19 international partners, have launched a guide promoting the adoption of Software Bill of Materials (SBOM) to enhance software transparency and security. The guide aims to assist software producers, purchasers, and operators in integrating SBOM practices to mitigate risks and strengthen cybersecurity resilience.
A coalition of major tech companies, including Cisco and Microsoft, has proposed the OpenEoX framework to standardize notifications for when products will no longer receive security updates or support. The initiative aims to address the challenges organizations face in tracking end-of-life software and hardware, which can increase cybersecurity risks.