Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
SBOM and VEX: Challenging Supplier Vulnerability Claims
A supplier statement that a vulnerability does not affect a product needs technical support. Explore how SBOM and VEX contribute to vulnerability decisions in software-defined vehicles. Learn why reachability, configuration and supporting evidence matter more than the existence of a document.
Related CUP episodes:
SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions
NIST IR 8536: Verifying the Software Supply Chain
Automotive Supply Chains: Who Owns the Cybersecurity Fix?
NIS2 Supplier Security: When Compliance Costs Become a Risk
OT Supplier Risk: Building Resilience Without…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.