CISA Issues Fresh SBOM Guidance. Did They Get It Right?

Dark Reading coverage highlights emerging and active cybersecurity risks across AI agent escape and abuse, cloud and identity takeover, critical-infrastructure targeting, ransomware, mobile malware, supply-chain compromise, certificate and passkey weaknesses, data exposure, and state-sponsored operations. Several reports describe high-impact vulnerabilities and attacks, including unauthenticated platform takeover, cross-tenant cloud identity compromise, AD privilege escalation, exposed data-center controllers, Zimbra zero-day exploitation, and malware targeting financial accounts.