aDolus Blog

EU Cyber Resilience Act (CRA) Clears Penultimate Step

5 min read

Supply Chain Management SBOM Legislation

EU Cyber Resilience Act (CRA) Clears Penultimate Step

By Eric Byres on December 8, 2023

On December 3rd, the EU's new Cyber Resilience Act (CRA) got a big step closer to being adopted when the European Parliament and the EU Council reached an agreement on the legislation. It...

A Flurry of Regulatory Action and the Need for SBOMs

5 min read

Regulatory Requirements Supply Chain Management SBOM VEX

A Flurry of Regulatory Action and the Need for SBOMs

By Eric Byres on October 12, 2022

Executive Order 14028 on Improving the Nation's Cybersecurity was issued in May of 2021 and provided a roadmap for a series of regulatory initiatives that government agencies (and anyone...

Sorry Blackberry: You Are Part of the Supply Chain

2 min read

Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028 VEX

Sorry Blackberry: You Are Part of the Supply Chain

By Eric Byres on November 2, 2021

Today, reporters Betsy Woodruff Swan and Eric Geller at Politico published a story: “BlackBerry resisted announcing major flaw in software powering cars, hospital equipment.” They outline...

NTIA Publishes Minimum Components of an SBOM

4 min read

3rd Party Components Supply Chain Management SBOM

NTIA Publishes Minimum Components of an SBOM

By Derek Kruszewski on July 15, 2021

In today’s blog post I’d like to recognize all the hard work done by NTIA (National Telecommunications and Information Administration) and congratulate them on publishing the minimum...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 4

5 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 4

By Eric Byres on May 26, 2021

Section 3 - Less Fog, More Cloud Section 3: Modernizing Federal Government Cybersecurity of the Executive Order is all about government agencies moving to the cloud and doing it right. If...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

By Eric Byres on May 21, 2021

So you don’t sell to the Feds… Today’s blog is going to take a break from analyzing a specific section of the Executive Order on Improving the Nation’s Cybersecurity and focus on who will...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

By Eric Byres on May 18, 2021

Removing Barriers to Sharing Threat Information On Friday we dissected Section 4: Enhancing Software Supply Chain Security of the new Executive Order on Improving the Nation’s Cybersecurity...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

4 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

By Eric Byres on May 14, 2021

Late Wednesday night President Biden signed the Executive Order on Improving the Nation’s Cybersecurity. Compared to any Executive Order (EO) I’ve seen, this is a massive and complex...

2 min read

#supplychainsecurity ICS Supply Chain Management

Wrapping Up 2020 with Dale Peterson

By Eric Byres on January 7, 2021

Wrapping up my year on December 31, I was delighted to join ICS cybersecurity luminary Dale Peterson for his December: ICS Security Month in Review episode of the Unsolicited Response...

Three Things the SolarWinds Supply Chain Attack Can Teach Us

4 min read

hacking ICS Supply Chain Management SBOM

Three Things the SolarWinds Supply Chain Attack Can Teach Us

By Eric Byres on December 18, 2020

Just in case you missed it, a software supply chain attack on the US government and industries is consuming the waking hours of everyone involved in cyber security this week. The attack...