Anchore@anchore
7h
👀 CISOs, take note! @dfsoftwareinc uses automated #SBOM generation to build trust fast. See how it's opening doors in data warehousing. 🔗 anchore.com/wp-content/upl… #SoftwareSupplyChain
0
0
0
29
Anchore@anchore
22h
Audit fatigue is real when engineering teams spend weeks manually reconstructing deployment histories. Stop manual CVE correlation. Real-time Kubernetes inventory tracking solves this problem. anchore.com/blog/complianc…
0
0
0
76
Anchore@anchore
Nov 6
Turned on SBOM drift detection and it never fires? If every build gets a unique tag, there's no previous build of that tag to compare.

Keep a stable tag (latest, nightly, staging) in the pipeline too.

anchore.com/blog/sbom-drif…
0
0
0
43
Anchore@anchore
Nov 5
False positives killing your team's productivity? 😵‍💫

Anchore Secure gives you signal, not noise 📡

anchore.com/platform/secur…

#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
0
0
0
31
Anchore@anchore
Nov 4
Revolutionizing #DevSecOps in DoD Software Factories with #AnchoreFederal. Secure & compliant software for warfighters. Learn more: anchore.com/dod-software-f… #CyberSecurity
0
0
0
40
Anchore@anchore
Nov 4
Nightly rebuild, untouched Dockerfile. The SBOM diff still shows 14 modified packages and 2 removed.

That's SBOM drift, and your scanner is now checking a component list that doesn't match what's deployed.

anchore.com/blog/sbom-drif…
#SBOM
0
0
1
45
Anchore@anchore
Nov 2
New in Anchore Enterprise v6.3: policy gates for AI models. Fail stops the pipeline. Warn lets it continue and flags the model for vetting. anchore.com/blog/faster-an…
0
0
0
49
Anchore@anchore
Nov 2
PHP2Shell and end-of-life PHP: 5.4 through 8.1 get no upstream release. Count the builds you still run, in our latest blog: anchore.com/blog/php2shell…
1
0
0
59
Anchore@anchore
Nov 2
🔍 Two tools scanning the same Debian package can return different results. If your scanner misses transitive dependencies, you miss critical CVEs.

Learn to evaluate data accuracy in our new eBook, SBOM 102 👇
go.anchore.com/sbom102-guide-…
0
0
1
55
Anchore@anchore
Nov 2
Anchore is a Gold sponsor of the Government Security Cybersecurity Summit, virtual, Nov 18. Neil Levine, our SVP of Product, speaks at 11:35 AM ET on zero trust for legacy government systems. Register: invt.io/1exbr8c3672
0
0
0
41
Anchore@anchore
Nov 1
✨ Complete your SBOM journey with Part 2 of our blog series! Learn about Analyzed, Deployed, and Runtime SBOMs. Check it out 👉 anchore.com/blog/the-evolu… #SBOM #DevSecOps #Compliance
0
0
0
38
Anchore@anchore
Oct 31
Case 31/31: Ivanti Connect Secure. Status: CASE REOPENED. Thousands of organizations affected. New flaws keep surfacing.
That's a wrap on The Anchore Case Files: 31 incidents, one a day. No ghosts here, just 4 cases that won't stay buried. Happy Halloween 🎃👻
0
0
0
59
Anchore@anchore
Oct 31
New in Anchore Enterprise v6.3: Quick Package Search. Axios 1.14.1 and 0.30.4 were live on npm for about 3 hours with no CVE ever published. Now you can find where you run them. anchore.com/blog/faster-an…
0
0
0
89
Anchore@anchore
Oct 30
Case 30/31: TeamPCP: GitHub breach. Status: CASE CLOSED. 3,800 internal repos exfiltrated via an 18-minute trojanized extension.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
0
0
0
62
Anchore@anchore
Oct 29
Our SoftwarePlaza interview with Alex Rybak covers Anchore Enterprise v6. And v6.3 cuts Ubuntu ESM false positives. Watch: softwareplaza.com/it-magazine/an…
0
0
0
51
Anchore@anchore
Oct 29
PHP2Shell patching gap: a registry says php:8.3-fpm is fixed, but pods started before the rebuild still run the old digest. How to find them, in our latest blog: anchore.com/blog/php2shell…
1
0
0
62
Anchore@anchore
Oct 29
Case 29/31: CrowdStrike outage. Status: CASE CLOSED. 8.5 million machines down worldwide. No attacker required.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
0
0
0
61
Anchore@anchore
Oct 29
SBOM adoption is accelerating, driven by #security best practices and regulatory requirements. This guide explains why #SBOMs matter, how to implement them, and how they fit into a #DevSecOps strategy. Download now: get.anchore.com/sbom101-guide-…
0
0
0
31
Anchore@anchore
Oct 29
Federal teams answer for SBOMs and standards adherence. OpenChain (ISO/IEC 5230, ISO/IEC 18974) gives them a common benchmark, and Anchore is now an OpenChain Partner. Start with an SBOM from Syft: anchore.com/blog/anchore-i…
0
0
0
57
Anchore@anchore
Oct 28
Static spreadsheets weren't built for machine-scale software delivery. Our on-demand webinar looks at a practical fix: automated security gates at commit, standardized SBOMs, and policy-as-code. Watch now: go.anchore.com/the-security-t…
0
0
1
52
Load more