Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
NIST IR 8536: Verifying the Software Supply Chain
A supplier register identifies companies but does not prove the provenance of the software they deliver. Explore NIST IR 8536 and the evidence needed to trace dependencies and responsibilities across a supply chain. The episode examines how to turn supplier declarations into verifiable trust relationships.
https://cybersecurityunderpressure.com/episodes
Related CUP episodes:
Railway AI at Risk: When Subcontractor Leaks Break the Trust Chain
Stadler Rail Extortion: When Supplier Trust Becomes the Attack Surface
SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions
When VEX Becomes a…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.