Building Resilient Software Supply Chains: Inside the Enhanced Qualys Software Composition Analysis | Qualys

Summary: Qualys announced enhancements to its Software Composition Analysis tool, including Software Atlas for mapping applications to their underlying components, first-class support for C/C++ binaries, SBOM generation in CycloneDX 1.4 and 1.6 formats, and runtime visibility via Qualys Cloud Agent. The blog cites Gartner's prediction that 45% of global organizations will have experienced a software supply chain attack by the end of 2025, a 431% surge over four years, with annual costs projected to reach $60 billion by the end of 2025.
Why it matters: Only one in three organizations feels adequately prepared to defend against software supply chain threats, and nearly half have not identified the most vulnerable components in their supply chain - while open-source components make up up to 80% of modern codebases.

Read the original at Qualys Blog ↗

Topics: Supply Chain & AppSec
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026