Description

The Abysmal State of Software Security—And What To Do About It 

From the Solar Winds breaches to hospitals and automotive giants’ shutdown, software supply chain attacks are causing billions in damage and threatening national security. Meanwhile, the software we depend on is increasingly assembled from ‘vibe-coding,’ third-party, and open-source components that organizations often can’t even inventory, much less secure. Some would argue that most software is now garbage, focused on speed to market, data collection, market share, ease of use, and profit rather than security, resilience, and privacy. We’ll connect the dots between the rise of software-defined everything, the explosive growth of open-source dependencies, and the mounting wave of supply chain compromise. 

But this isn’t all a doom-and-gloom talk we’ll demystify Software Bills of Materials (SBOMs). What they are, why Executive Order 14028 now requires them for government software vendors, and how they serve as a foundation for vulnerability management, license compliance, and zero-trust architecture. 

Presenter: Dave Hatter, Cyber Security Consultant of IntrustIT, Cybersecurity & Compliance | Speaker | Author | Educator | CISSP, CISA, CISM, CCSP, CSSLP, PMP, ITIL | Mayor