Firmware image shipping outdated libraries flagged via SBOM

Supply-chain compromise is pressing: this digest details the FakeGit campaign using roughly 7,600 fake GitHub repositories to distribute malware, alongside ENCFORGE ransomware that reaches AI model files through a vulnerable framework. Embedded firmware mirrors that risk — a device image quietly carrying outdated libraries becomes a soft target once exploits mature. In this demo a benign firmware sample is scanned to surface known-weak components buried inside the image. The SBOM module generates a software bill of materials for the firmware (bin/img), enumerating every packaged library and matching components against vulnerability data. Identified outdated libraries are flagged before deployment, so versioning exposure is visible and actionable instead of shipping unnoticed.