SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

DDark Reading · 4 hours ago

A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.