CISA Issues Fresh SBOM Guidance. Did They Get It Right?

Dark Reading security news covering software supply-chain and SBOM guidance, certificate and non-human identity risks, critical-infrastructure attacks, malware campaigns, cloud and Active Directory privilege escalation, ransomware, data exposure, authentication bypasses, and emerging threats involving agentic AI, sandbox escapes, and AI toolchains. Several reports describe high-impact vulnerabilities and active exploitation, including attacks against Zimbra, Azure Automation, Microsoft AD certificates, exposed data-center controllers, and water utilities.