The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your AI supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.
OWASP CycloneDX
- 148 Followers
- 7 Following
- 28 Posts
OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, OBOM, Advisories, VEX, and more.
The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your AI supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.
OWASP Foundation✨ Happy New Year! ✨
A new year begins, and a special celebration awaits. Join us in 2026 as we mark our 25th Anniversary together 🎉
#appsec #newyear #owasp #25thanniversary #cybersecurity #community
🎉 New year, new AppSec goals! Early Bird tickets for OWASP Global AppSec Vienna 2026 are live
https://owasp.glueup.com/event/162243/register/
25 years of OWASP 🇦🇹 Training + Conference + hands-on learning 🚀 Don’t miss out! 🔐
#appsec #owasp #cybersecurity #earlybird #conference #training
Huge congrats (and thank you) to IBM for releasing an open source plugin for SonarQube which generates Cryptography Bill of Materials (#CBOM). https://github.com/IBM/sonar-cryptography
And check out the Authoritative Guide to CBOM available at https://cyclonedx.org/guides/OWASP_CycloneDX-Authoritative-Guide-to-CBOM-en.pdf
#OWASP CycloneDX v1.6 now available with support for Cryptography Bill of Materials (CBOM), Attestations, and more. Explore whats new in the:
- Authoritative Guide to CBOM
- Authoritative Guide to Attesations
- Authoritative Guide to SBOM, Second Edition
OWASP Dependency-TrackCouldn’t attend this week’s Dependency-Track community meeting? No worries, we’ve got the recording.
@nscur0 leads us through the project roadmap. We also have special guests from the @CycloneDX #cryptography working group presenting #CBOM. Don’t miss it.
Dependency-Track Community Meeting (2024-03-06)
OWASP CycloneDX is ready to support your CRA compliance journey! - by Olle E Johansson
#SBOM #CBOM #VDR #VEX #Ecma #tc54 #cryptography #softwaresupplychain #cra
Join us for our next community meeting on January 31st at 3PM UTC (10:00am U.S. Eastern)!
Agenda:
- Project / Release Update (~15 min)
- How IBM CISO uses Dependency-Track (~10 min)
- Q&A (~30 min)
Carlos Holguera📢 NEW RELEASE: OWASP MASVS v2.1.0
Including MASVS-PRIVACY and @CycloneDX
https://github.com/OWASP/owasp-masvs/releases/tag/v2.1.0
https://mas.owasp.org/MASVS/12-MASVS-PRIVACY/
Thanks to everyone who gave feedback, all our contributors and donators! Special thanks to our MAS Advocate NowSecure for their huge contribution with human power!
