
Sign up to save your podcasts
Or


Your SBOM is probably useless, and it is time we talked about why.
In this episode, we look past the hype of vulnerability scanning to the uncomfortable reality of the software-defined vehicle. We walk through how suppliers are using VEX as a bureaucratic shield to dodge patches and why your security program is likely just a mountain of expensive noise.
We argue that if you are not prepared to challenge a supplier's claim with technical evidence, you are not doing security—you are just doing paperwork. This conversation is about moving from a flood of findings to actual, defensible risk management that protects the driver, not just the budget.
Subscribe and share this with a security lead who is tired of chasing ghosts in their supply chain.
#cybersecurity #automotive #supplychain #SBOM #VEX
By Antonio GonzálezYour SBOM is probably useless, and it is time we talked about why.
In this episode, we look past the hype of vulnerability scanning to the uncomfortable reality of the software-defined vehicle. We walk through how suppliers are using VEX as a bureaucratic shield to dodge patches and why your security program is likely just a mountain of expensive noise.
We argue that if you are not prepared to challenge a supplier's claim with technical evidence, you are not doing security—you are just doing paperwork. This conversation is about moving from a flood of findings to actual, defensible risk management that protects the driver, not just the budget.
Subscribe and share this with a security lead who is tired of chasing ghosts in their supply chain.
#cybersecurity #automotive #supplychain #SBOM #VEX