Njordium Cyber Group AB has introduced Inspect360 Code, a platform that brings software supply chain security and vulnerability management together, giving organisations a live picture of which components sit inside their products and whether known flaws have been fixed.

The new platform maintains a current record of the components within each product an organisation builds, buys or ships. It continuously compares that record against newly disclosed vulnerabilities and judges each one in light of how the product is really constructed and used.

Fixes are monitored against deadlines that reflect business criticality, while each assessment and decision is logged alongside its rationale so that boards, auditors and regulators can review it.

The launch targets a common weakness in modern development. Much software is built from third-party material such as open-source libraries, frameworks and supplier code. When a fresh vulnerability emerges, the real challenge is establishing whether it touches a given product, who must respond and whether remediation has happened. Many firms still rely on spreadsheets, scan outputs and email exchanges with suppliers to work this out.

Njordium points to recent incidents to underline the urgency. In October, attackers tampered with refrigeration systems at hundreds of French supermarkets, and a further wave on 2 November struck food retailers across other European countries, including ICA and Coop outlets in Sweden, causing spoiled stock and operational disruption.

Over the same period, critical PHP flaws were actively exploited, with hundreds of products built on the technology flagged as potentially exposed. Njordium notes that Inspect360 Code does not defend industrial systems or networks, but instead addresses these questions for the software a business develops, ships and relies upon.

Source link