Cyberattack Gold: SBOMs Offer an Easy Census of Vulnerable Software
Attackers will likely use software bills-of-material (SBOMs) for searching for software potentially vulnerable to specific software flaws.
https://www.darkreading.com/application-security/cyberattack-gold-sboms-census-vulnerable-software