We are currently in process of scheduling talks and have gotten many great proposals from speakers. But we are lacking a few topics that we think will complement those that we’ve got already, so we are extending the call for papers for a week or so. We’re looking for talks Read more…
Are you ready for the EU Cyber Resilience Act (CRA)? SBOM Europe will host two one-day trainings this spring, one in Manchester UK and one in Stockholm, Sweden. Register today to get up to date with this regulation, what you need to do in order to be compliant and understand where the Read more…
Today we published the Call For Papers for the conference Nordic Software Security Summit 2025. Why don’t you contact us with your ideas early so we can brainstorm and use that piece of the puzzle while creating a new edition of the leading application security conference in the Nordics! The Read more…
The Nordic Software Security Summit 2025 will take place October 1-3 in Stockholm, Sweden. We are slowly starting our planning, discussions with sponsors and partners to create a great second event with exciting talks, great tutorials and participants that share their experiences. At that time the EU Cyber Resilience Act Read more…
The Cyber Resilience Act was adopted today. It will soon be published in the Official Journal of the European Union and 20 days after that it becomes a full regulation. The act affects almost all software distributed in the union. Software needs to be secure by design and secure by Read more…
Daniel Stenberg, author of Curl, has recorded his talk on NSSS24 on Youtube. Enjoy this talk, that covers the struggles of vulnerability handling for an Open Source project in detail in Daniel’s special style.
We’re happy to introduce you to our Gold Sponsor: Endor Labs. Endor Labs secures everything your code depends on throughout the SDLC. Start by creating a more efficient and effective dependency management program with consolidated reachability-based SCA, SAST, container scanning, artifact signing, and CI/CD security. Reduce security tool noise by Read more…
One of the main pillars of the EU Cyber Resilience Act (CRA) is to make sure that manufacturers take responsibility for their customer’s cyber security and resilience. Today a vendor can give instructions to the customer on how to protect themselves by applying firewall and other protective measures while the Read more…
CycloneDX v1.6 has become an ECMA Standard. The decision was taken by the ECMA General Assembly June 26, 2024. This is important for all the work going on with worldwide regulations requiring vendors to assume more responsibility for their user’s security, making sure their software is secure by design and Read more…
The new EU legislation will mean a new business model for many products Free and open software is a major part of any software product today, whether it is an embedded system, an IoT sensor, a mobile app or a major cloud service. The cost of using these components in Read more…