Software supply chain security is a $2.8B+ market heading to $5B by 2030 (Gartner, 2026), driven by rules like the EU CRA and FedRAMP. AI-assisted discovery is adding CVE volume on top. anchore.com/blog/8-days-to-f…

Alex Rybak demos Anchore Enterprise v6 in our SoftwarePlaza interview: one view, no duplicates, and a ranked list of what to fix first. Watch how: softwareplaza.com/it-magazin…

"Open source is the foundation of modern software, and customers increasingly need to show, not just claim, that they manage it responsibly." Alex Rybak, Anchore, on why we joined OpenChain as a Partner. anchore.com/blog/anchore-is-…

PHP2Shell (CVE-2026-109618, CVE-2026-109619) was probed 4 days before the fix. Working shells hit honeypots Oct 24. 1M+ PHP servers were unpatched Oct 21. Which PHP builds do you run? anchore.com/blog/php2shell-y…

Case 26/31: TeamPCP: Trivy compromise. Status: CASE CLOSED. 76 of 77 version tags poisoned, via stolen service-account credentials. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 25/31: Citrix NetScaler zero-days. Status: CASE CLOSED. 2 zero-days exploited before a patch existed. CISA gave federal agencies 3 days to patch. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

📣 New case study alert! See how @dfsoftwareinc cut #VulnerabilityManagement time by 75% using #AnchoreEnterprise. Perfect for highly regulated industries needing air-gapped security. 🔗 anchore.com/wp-content/uploa…

Case 24/31: React2Shell. Status: CASE CLOSED. A perfect 10.0 severity score, 4,000+ exploit attempts in the first 2 hours after disclosure. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

92% of attendees we polled said their org wasn't CRA-compliant. The EU CRA's reporting obligations took effect September 11, 2026 regardless. What that means for your program: anchore.com/blog/8-days-to-f…

We sat down with Twain at SoftwarePlaza to talk Anchore Enterprise v6. The demo takes about 1,200 vulnerabilities to a 7-item fix list. Full interview: softwareplaza.com/it-magazin…

Case 23/31: LastPass. Status: CASE CLOSED. Millions of encrypted vaults exposed, from one home computer. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Streamline #FedRAMP reporting with Anchore Enterprise. Auto-generate pass/fail reports & simplify compliance. Learn how: anchore.com/fedramp/ #PolicyasCode #Cybersecurity

60% of organizations take 8+ days to remediate a high-severity vulnerability, mostly due to manual, email-driven workflows. We call that delay the "security tax". Our on-demand webinar explains how to calculate yours and cut it down. Watch now: go.anchore.com/the-security-…

Case 22/31: Log4Shell. Status: CASE REOPENED. Hundreds of millions of devices affected. Still found in scans. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Anchore is now an official OpenChain Partner (Vendor category). OpenChain maintains ISO/IEC 5230 for license compliance and ISO/IEC 18974 for open source security assurance. Why it fits what we build: anchore.com/blog/anchore-is-… #OpenChain

Manual SBOM generation is impossible in DevOps. Fixed a bug? New SBOM needed. Automate it with a single CLI command integrated into your CI/CD. Read our new eBook, SBOM 102, to execute generation at scale. 🔗 go.anchore.com/sbom102-guide…

Case 21/31: Kaseya VSA. Status: CASE CLOSED. 1,500 businesses hit in one weekend, via one trusted platform. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

The EU CRA gives you 24 hours to report some incidents. 60% of organizations need 8+ days to fix a high-severity vulnerability (SecurityScorecard, 2026). The data: anchore.com/blog/8-days-to-f…

Case 20/31: Colonial Pipeline. Status: CASE CLOSED. $4.4 million ransom paid, pipeline shut for 6 days. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Live in 1 hour: Dan Nurmi + Christopher Phillips on detecting and governing open-weight AI models. 10am PT / 1pm ET. Join the webinar: go.anchore.com/managing-secu…