News

Announcements and updates about P-SSCRM, newest first.

• September 23, 2026

  Closing the Chain: How to reduce your risk of being SolarWinds, Log4j, or XZ Utils

  A new paper by Sivana Hamer, Jacob Bowen, Md Nazmul Haque, Robert Hines, Chris Madden, and Laurie Williams, published at ICSE, analyzes the SolarWinds, Log4j, and XZ Utils supply chain attacks against ten existing security frameworks — including the SSDF...

• February 20, 2026

  P-SSCRM mapping added to the National Online Informative References Program (OLIR)

  The National Online Informative References (OLIR) Program is a NIST effort to help subject matter experts define standardized online informative references (OLIRs) between elements of their documents, products, and services and elements of NIST documents such as the Cybersecurity Framework...