Latest issue

The SBOM Won't Save You: What the Trivy and Axios Attacks Actually Proved

4/16/2026

Your vendor questionnaire is a time capsule. It tells you what a supplier's security posture looked like on the day someone filled it out — which is to say, it tells you almost nothing about what's happening in your CI/CD pipeline right now. March 2026 made that argument for us,…