THE article highlights 7 critical vulnerabilities detected today in various software, including improper authentication and SQL injection issues across platforms like BerriAI and SonicWall. Additionally, it discusses Microsoft's upcoming requirement for drivers under the Windows Hardware Compatibility Program (WHCP) to include a Software Bill of Materials (SBOM) and a Vulnerability Exploitability eXchange (VEX) statement starting in March 2027.
This new policy is largely driven by the EU Cyber Resilience Act, mandating developers to disclose third-party components and address security vulnerabilities throughout a product's lifecycle.