Case 21/31: Kaseya VSA. Status: CASE CLOSED. 1,500 businesses hit in one weekend, via one trusted platform.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
The EU CRA gives you 24 hours to report some incidents. 60% of organizations need 8+ days to fix a high-severity vulnerability (SecurityScorecard, 2026). The data: anchore.com/blog/8-days-to-f…
Case 20/31: Colonial Pipeline. Status: CASE CLOSED. $4.4 million ransom paid, pipeline shut for 6 days.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Live in 1 hour: Dan Nurmi + Christopher Phillips on detecting and governing open-weight AI models. 10am PT / 1pm ET. Join the webinar: go.anchore.com/managing-secu…
DoWI 8430.01 (in effect Sept 8, 2026) makes machine-readable software evidence a condition to operate on DoW networks. We mapped each requirement to Anchore Enterprise: anchore.com/blog/dow-instruc…
Tomorrow, 10am PT: Dan Nurmi + Christopher Phillips on extending the SBOM and policy-as-code workflow you already run to cover open-weight AI models. No parallel process. Last chance to register for the webinar: go.anchore.com/managing-secu…
Case 19/31: SolarWinds. Status: CASE CLOSED. 18,000 orgs infected via one trusted, signed update. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Case 18/31: Capital One. Status: CASE CLOSED. 106 million customers affected, via one misconfigured firewall. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Case 17/31: British Airways Magecart. Status: CASE CLOSED. £20 million fine, payment data skimmed live.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
DoWI 8430.01 makes SBOMs a condition to operate on DoW networks (since Sept 8, 2026). It covers every Component at any dollar value. Anchore Enterprise generates and imports SBOMs: anchore.com/blog/dow-instruc…
Case 16/31: Marriott / Starwood. Status: CASE CLOSED. 500 million guest records exposed, undetected for years.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Open-weight models pulled from Hugging Face won't show up in a standard SBOM. Live webinar Oct 20, 10am PT / 1pm ET: Christopher Phillips + Dan Nurmi on detecting them during build and what metadata you get. Register: go.anchore.com/managing-secu…
Case 15/31: Facebook / Cambridge Analytica. Status: CASE CLOSED. 87 million users' data misused via one app's permissions.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Case 14/31: NotPetya / MEDoc. Status: CASE CLOSED. $10 billion in damages, disguised as ransomware.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
Case 13/31: WannaCry. Status: CASE REOPENED. 200,000 machines infected across 150 countries. Still found in the wild.
Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
An open-weight AI model isn't software, which is why most SBOM and SCA tooling never sees it. Live webinar Oct 20, 10am PT / 1pm ET: Dan Nurmi + Christopher Phillips on detecting and governing open-weight models. Register: go.anchore.com/managing-secu…
As of September 8, 2026, software on DoW networks needs an SBOM, build provenance, and scan results as machine-readable evidence. DoWI 8430.01 makes that a condition to operate: anchore.com/blog/dow-instruc…