Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
SBOM and VEX: Proving Vulnerability Reachability | CUP Focus
Component presence and practical exposure are different facts. This CUP Focus explains how static and dynamic reachability analysis support VEX decisions, reduce false positives and create defensible evidence when an actively exploited vulnerability appears.
Format: CUP Focus, a self-contained section from the Cybersecurity Under Pressure archive.
Related CUP episodes:
Cyber Resilience Act: Evidence and the 24-Hour Reporting Clock
SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions
SBOM and VEX: Challenging Supplier Vulnerability Claims
NIST IR 8536: Verifying the Software Supply…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.