Anchore

New in Anchore Enterprise v6.3: Quick Package Search. Axios 1.14.1 and 0.30.4 were live on npm for about 3 hours with no CVE ever published. Now you can find where you run them. anchore.com/blog/faster-answ…

Case 30/31: TeamPCP: GitHub breach. Status: CASE CLOSED. 3,800 internal repos exfiltrated via an 18-minute trojanized extension. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Our SoftwarePlaza interview with Alex Rybak covers Anchore Enterprise v6. And v6.3 cuts Ubuntu ESM false positives. Watch: softwareplaza.com/it-magazin…

PHP2Shell patching gap: a registry says php:8.3-fpm is fixed, but pods started before the rebuild still run the old digest. How to find them, in our latest blog: anchore.com/blog/php2shell-y…

Case 29/31: CrowdStrike outage. Status: CASE CLOSED. 8.5 million machines down worldwide. No attacker required. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

SBOM adoption is accelerating, driven by #security best practices and regulatory requirements. This guide explains why #SBOMs matter, how to implement them, and how they fit into a #DevSecOps strategy. Download now: get.anchore.com/sbom101-guid…

Federal teams answer for SBOMs and standards adherence. OpenChain (ISO/IEC 5230, ISO/IEC 18974) gives them a common benchmark, and Anchore is now an OpenChain Partner. Start with an SBOM from Syft: anchore.com/blog/anchore-is-…

Static spreadsheets weren't built for machine-scale software delivery. Our on-demand webinar looks at a practical fix: automated security gates at commit, standardized SBOMs, and policy-as-code. Watch now: go.anchore.com/the-security-…

Case 28/31: XZ Utils. Status: CASE CLOSED. Caught just days before wide release, purely by chance. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Navigating #NIST and #SSDF compliance? #AnchoreEnterprise offers automated reports, continuous monitoring, and integration with #DevSecOps platforms. 📊 ➡️ anchore.com/nist-compliance-… #Compliance #SSDFAttestation

Case 27/31: TeamPCP: Checkmarx compromise. Status: CASE CLOSED. Two separate waves, a month apart, before the full picture was clear. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Anchore Enterprise v6.3 is here. New: Quick Package Search for issues with no CVE, Ubuntu ESM support, alerts when a vulnerability gets worse, and AI model policy gates. anchore.com/blog/faster-answ…

Software supply chain security is a $2.8B+ market heading to $5B by 2030 (Gartner, 2026), driven by rules like the EU CRA and FedRAMP. AI-assisted discovery is adding CVE volume on top. anchore.com/blog/8-days-to-f…

Alex Rybak demos Anchore Enterprise v6 in our SoftwarePlaza interview: one view, no duplicates, and a ranked list of what to fix first. Watch how: softwareplaza.com/it-magazin…

"Open source is the foundation of modern software, and customers increasingly need to show, not just claim, that they manage it responsibly." Alex Rybak, Anchore, on why we joined OpenChain as a Partner. anchore.com/blog/anchore-is-…

PHP2Shell (CVE-2026-109618, CVE-2026-109619) was probed 4 days before the fix. Working shells hit honeypots Oct 24. 1M+ PHP servers were unpatched Oct 21. Which PHP builds do you run? anchore.com/blog/php2shell-y…

Case 26/31: TeamPCP: Trivy compromise. Status: CASE CLOSED. 76 of 77 version tags poisoned, via stolen service-account credentials. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 25/31: Citrix NetScaler zero-days. Status: CASE CLOSED. 2 zero-days exploited before a patch existed. CISA gave federal agencies 3 days to patch. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

📣 New case study alert! See how @dfsoftwareinc cut #VulnerabilityManagement time by 75% using #AnchoreEnterprise. Perfect for highly regulated industries needing air-gapped security. 🔗 anchore.com/wp-content/uploa…

Case 24/31: React2Shell. Status: CASE CLOSED. A perfect 10.0 severity score, 4,000+ exploit attempts in the first 2 hours after disclosure. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.