Vulnerability eXploitability Exchange explained: How VEX makes SBOMs actionable

From csoonline.com

Developers work together to review lines of code in an office workspace.

The fallout of the SolarWinds cybersecurity incident, coupled with Cybersecurity Executive Order (EO) put the topic of software supply chain security, and by association, software bills of material (SBOM) center stage in the security dialog. Coupled with the Log4j vulnerability and impact that left countless organizations scrambling to determine the impact, SBOMs are now a critical component of modern cybersecurity vulnerability programs. 

Read more…