Your enterprise doesn’t need six BOM programs. It needs one evidence graph
A CSO essay argues enterprises should replace separate BOM programs with one federated evidence graph.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #eu-cra
EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage
Experts say the EU Cyber Resilience Act’s 24-hour reporting clock makes manual vulnerability triage impractical.
3
EU Cyber Resilience Act requirements for containers and Kubernetes
The EU Cyber Resilience Act imposes SBOM, patching, and 24-hour exploit reporting duties on container and Kubernetes products.
1
The EU CRA's Real Question: What Shipped, and When Did You Know?
ActiveState argues the EU CRA's 24-hour ENISA exploit-notification duty, effective September 11, 2026, makes current SBOMs and provenance visibility a legal necessity.
3