Just stumbled upon the #SPDX #Crypto #List Group
This list provides a shared, unambiguous vocabulary for
identifying and #referencing #cryptographic #algorithms in Software Bill of
Materials (SBOMs), SPDX documents, and related tooling.
https://lists.spdx.org/g/spdx-security/topic/introduction_of_the_spdx/114545649
On July 7, 2025 the Bank for International Settlements (BIS) – often called the “central bank of central banks” – published a major paper titled “Quantum-readiness for the financial system: a roadmap.” This BIS Paper No. 158, authored by experts from BIS’s Innovation Hub and several central banks, provides a comprehensive framework to help the global financial sector transition to quantum-safe cryptography. The BIS (an international institution that “fosters international monetary and financial cooperation” among central banks) rarely sounds the alarm on technology issues so explicitly. Their decision to issue a quantum-readiness roadmap is a clear signal that the threat
I have a small hunch why IBM has a tool that generates a #CBOM and tells you if they are #quantum safe or not...
Suffice to say that it's a reminiscent of the time that Altman traveled around the world and warned everyone that his #hallucination machine is an existential threat to humanity.
Huge congrats (and thank you) to IBM for releasing an open source plugin for SonarQube which generates Cryptography Bill of Materials (#CBOM). https://github.com/IBM/sonar-cryptography
And check out the Authoritative Guide to CBOM available at https://cyclonedx.org/guides/OWASP_CycloneDX-Authoritative-Guide-to-CBOM-en.pdf
#SBOM: #OWASP CycloneDX v1.6 Standard Released, Advances Software Supply Chain Security with Cryptographic Bill of Materials(#CBOM) and CDXA Attestations ("proof-of-compliance"):
👇
https://cyclonedx.org/news/cyclonedx-v1.6-released/
https://cyclonedx.org/news/cyclonedx-v1.6-released/
Couldn’t attend this week’s Dependency-Track community meeting? No worries, we’ve got the recording.
@nscur0 leads us through the project roadmap. We also have special guests from the @CycloneDX #cryptography working group presenting #CBOM. Don’t miss it.
OWASP CycloneDX is ready to support your CRA compliance journey! - by Olle E Johansson
#SBOM #CBOM #VDR #VEX #Ecma #tc54 #cryptography #softwaresupplychain #cra
If you missed the OWASP #CycloneDX community virtual meeting on March 6th the recording is available on YouTube. Learn about the latest DependencyTrack updates and #CBOM or Cryptography Bill of Materials in CycloneDX:
0xKaishakunin
Marin Ivezic
OWASP CycloneDX
Sam Stepanyan 
🐘
OWASP Dependency-Track
Steve "Looking for Work" Pordon (he/him/his)
Mathew J. Schwartz