Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
#sbom
Newest first
The Cyber Resilience Act for Software Vendors: A Field Guide
The CRA turns secure development, SBOMs and vulnerability handling into legal obligations for anything with digital elements sold in the EU. Here is what is in scope, what the essential requirements say, and why September 2026 matters before December 2027 does.
Tracking Vulnerabilities in Your Stack with SBOMs
What SBOMs actually are, why regulators keep demanding them, how scanning one against a CVE database works, and where the whole approach quietly breaks.
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note