Case 23/31: LastPass. Status: CASE CLOSED. Millions of encrypted vaults exposed, from one home computer. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Streamline #FedRAMP reporting with Anchore Enterprise. Auto-generate pass/fail reports & simplify compliance. Learn how: anchore.com/fedramp/ #PolicyasCode #Cybersecurity

60% of organizations take 8+ days to remediate a high-severity vulnerability, mostly due to manual, email-driven workflows. We call that delay the "security tax". Our on-demand webinar explains how to calculate yours and cut it down. Watch now: go.anchore.com/the-security-…

Case 22/31: Log4Shell. Status: CASE REOPENED. Hundreds of millions of devices affected. Still found in scans. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Anchore is now an official OpenChain Partner (Vendor category). OpenChain maintains ISO/IEC 5230 for license compliance and ISO/IEC 18974 for open source security assurance. Why it fits what we build: anchore.com/blog/anchore-is-… #OpenChain

Manual SBOM generation is impossible in DevOps. Fixed a bug? New SBOM needed. Automate it with a single CLI command integrated into your CI/CD. Read our new eBook, SBOM 102, to execute generation at scale. 🔗 go.anchore.com/sbom102-guide…

Case 21/31: Kaseya VSA. Status: CASE CLOSED. 1,500 businesses hit in one weekend, via one trusted platform. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

The EU CRA gives you 24 hours to report some incidents. 60% of organizations need 8+ days to fix a high-severity vulnerability (SecurityScorecard, 2026). The data: anchore.com/blog/8-days-to-f…

Case 20/31: Colonial Pipeline. Status: CASE CLOSED. $4.4 million ransom paid, pipeline shut for 6 days. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Live in 1 hour: Dan Nurmi + Christopher Phillips on detecting and governing open-weight AI models. 10am PT / 1pm ET. Join the webinar: go.anchore.com/managing-secu…

DoWI 8430.01 (in effect Sept 8, 2026) makes machine-readable software evidence a condition to operate on DoW networks. We mapped each requirement to Anchore Enterprise: anchore.com/blog/dow-instruc…

Tomorrow, 10am PT: Dan Nurmi + Christopher Phillips on extending the SBOM and policy-as-code workflow you already run to cover open-weight AI models. No parallel process. Last chance to register for the webinar: go.anchore.com/managing-secu…

Case 19/31: SolarWinds. Status: CASE CLOSED. 18,000 orgs infected via one trusted, signed update. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 18/31: Capital One. Status: CASE CLOSED. 106 million customers affected, via one misconfigured firewall. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 17/31: British Airways Magecart. Status: CASE CLOSED. £20 million fine, payment data skimmed live. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

DoWI 8430.01 makes SBOMs a condition to operate on DoW networks (since Sept 8, 2026). It covers every Component at any dollar value. Anchore Enterprise generates and imports SBOMs: anchore.com/blog/dow-instruc…

Case 16/31: Marriott / Starwood. Status: CASE CLOSED. 500 million guest records exposed, undetected for years. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Open-weight models pulled from Hugging Face won't show up in a standard SBOM. Live webinar Oct 20, 10am PT / 1pm ET: Christopher Phillips + Dan Nurmi on detecting them during build and what metadata you get. Register: go.anchore.com/managing-secu…

Aiming for continuous ATO? Anchore Federal simplifies it with security checks & policy enforcement. See our approach: anchore.com/dod-software-fac… #cATO #PolicyasCode

Case 15/31: Facebook / Cambridge Analytica. Status: CASE CLOSED. 87 million users' data misused via one app's permissions. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.