Topic
Software Supply Chain
12 published works
Internet, IT & e-Discovery
IBM betting $5B it can fix bugs that Anthropic AI has found!
By Peter Vogel
DarkReading.com reported that “IBM and Red Hat assign 20,000 engineers to the new Project Lightwell service as Anthropic's Mythos findings ignite debate over how to secure the open-source software supply…
ComplexDiscovery
When the worm targets the assistant: Miasma turns AI coding agents into the trigger
By Rob Robinson
Editor’s Note: A self-replicating worm has turned the AI coding assistant into a delivery mechanism, and the same campaign just forced one of the larger takedowns the open-source supply chain…
Inside Government Contracts
CISA Releases Guidance on Minimum Expectations for Software Bill of Materials
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette, Matthew Harden, Krissy Chapman
On October 15, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) published software bill of materials (“SBOM”) guidance through the third edition of Framing Software Component Transparency: Establishing a…
Government Contracts & Investigations Blog
Update: CISA Seeks Additional Input from Software Providers on Security Attestation Form
By Townsend Bourne, Lillia Damalouji
The Cybersecurity and Infrastructure Security Agency (“CISA”) recently revised its Secure Software Development Attestation Common Form (after receiving over 110 comments on the initial draft), and is seeking additional comments…
Global Policy Watch
<strong>November 2022 Developments Under President Biden’s Cybersecurity Executive Order</strong>
By Robert Huffman, Susan B. Cassidy, Michael Wagner, Ryan Burnette, Hannah Hummel
This is the nineteenth in a series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber…
Inside Government Contracts
October 2022 Developments Under President Biden’s Cybersecurity Executive Order
By Robert Huffman, Susan B. Cassidy, Michael Wagner, Ryan Burnette, Hannah Hummel
This is the eighteenth in a series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber…
Inside Privacy
<strong>OMB Issues Memorandum on Self-Attestations by Software Developers </strong><strong>of Secure Software Development Practices and Collection of Software Bill of Materials</strong>
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette
On September 14, 2022, the Director of the Office of Management and Budget (“OMB”) issued a memorandum to the heads of executive branch departments and agencies addressing the enhancement of…
Data Law Insights
Going Hard on Software: OMB Unveils Mandatory Software Supply Chain Security Compliance Requirements
Yesterday, the Office of Management and Budget (OMB) released Memorandum M-22-18, implementing software supply chain security requirements that will have a significant impact on software companies and vendors in accordance with Executive…
Privacy World
Office of Management and Budget Takes Action to Enhance the Security of Software Supply Chain
Yesterday the White House Office of Management and Budget issued guidelines (the “Guidelines”) requiring all federal agencies to buy and use software that comply with “secure development practices” developed by…
Inside Government Contracts
October 2021 Developments Under President Biden’s Cybersecurity Executive Order
By Robert Huffman, Susan B. Cassidy, Ashden Fein, Ryan Burnette
This is the sixth in the series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber…