Key Takeaways: Legacy devices can’t be patched easily, but compensating controls provide alternatives. SBOMs are critical for transparency and accountability. The FDA now mandates secure development and life cycle planning. Cybersecurity and patient safety are...
Key Takeaways The 2025 SBOM minimum elements represent significant progress since the 2021 baseline. New fields, such as license, hashes, and generation context, push SBOMs beyond check-the-box compliance. Licensing data closes a critical blind spot in software supply...
EU CRA, FDA, and Cyber Regulations The regulatory landscape for product security has fundamentally shifted. What was once a “nice-to-have” consideration has become mandatory compliance across industries, with cybersecurity now sitting at the center of product...
The healthcare industry has reached a cybersecurity tipping point. While IT has been the primary focus of security efforts to date, RunSafe Security’s 2025 Medical Device Cybersecurity Index found that 22% of healthcare organizations have experienced cyberattacks that...
The EU Cyber Resilience Act (CRA) is set to transform the landscape of cybersecurity compliance for manufacturers, developers, and supply chain providers across Europe—and its impact will be felt far beyond the EU’s borders. While the EU CRA won’t be fully enforced...
Over the past several years, regulators around the globe have begun issuing Software Bill of Materials (SBOM) requirements and standards in an effort to strengthen software security. SBOMs are a detailed inventory of all the components—open source, proprietary, and...
