Trump Administration Rescinds Biden-Era SBOM Guidance

The Office of Management and Budget issued M-26-05 rescinding previous memos that mandated SBOMs and vendor self-attestations (M-22-18 and M-23-16), prompting divided reactions from the security community: critics warn the rollback undermines supply-chain transparency and minimum secure-development practices, while supporters argue it allows agencies to prioritize mission risk and operational impact; the memo leaves agencies free to use NIST SSDF as a reference but raises concerns about inconsistent assurance practices and potential long-term security degradation if a common baseline is not maintained.