Software bills of materials (SBOMs) inventory applications and are an important measure for securing an organization’s software supply chain. Three common SBOM formats are CycloneDX, which is particularly useful for tracking vulnerabilities; Software Package Data Exchange (SPDX), which is often chosen by larger organizations due to its license management ability; and Software Identification (SWID) Tags, which are used to ensure compliance with licensing agreements and software patch updates.
Update on cyber attack after hospitals declare ‘major incident’
A cyber attack on the Wirral University Teaching Hospital NHS Foundation Trust led to the trust declaring a “major incident”, affecting all its hospitals. Appointments