NIST 800-218 revision
NIST 800-218 wants you!
NIST has released an initial public draft of v1.2 of NIST 800-218. If that means nothing to you, move along. Otherwise, you have until Jan 30 to comment. The draft is here. (NIST did not set an unusually short comment period, we’d missed it). ReversingLabs has a story with various perspectives: SSDF 1.2 sees AppSec as a journey. I do wish they’d frame it as software security issues, not software vulnerabilities.