Securing and managing the software supply chain. Proud parent of @SyftProject and @GrypeProject.

Santa Barbara, CA
Case 21/31: Kaseya VSA. Status: CASE CLOSED. 1,500 businesses hit in one weekend, via one trusted platform. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
24
The EU CRA gives you 24 hours to report some incidents. 60% of organizations need 8+ days to fix a high-severity vulnerability (SecurityScorecard, 2026). The data: anchore.com/blog/8-days-to-f…
41
Case 20/31: Colonial Pipeline. Status: CASE CLOSED. $4.4 million ransom paid, pipeline shut for 6 days. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
1
69
Live in 1 hour: Dan Nurmi + Christopher Phillips on detecting and governing open-weight AI models. 10am PT / 1pm ET. Join the webinar: go.anchore.com/managing-secu…
1
47
DoWI 8430.01 (in effect Sept 8, 2026) makes machine-readable software evidence a condition to operate on DoW networks. We mapped each requirement to Anchore Enterprise: anchore.com/blog/dow-instruc…
71
Tomorrow, 10am PT: Dan Nurmi + Christopher Phillips on extending the SBOM and policy-as-code workflow you already run to cover open-weight AI models. No parallel process. Last chance to register for the webinar: go.anchore.com/managing-secu…
1
51
Case 19/31: SolarWinds. Status: CASE CLOSED. 18,000 orgs infected via one trusted, signed update. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
1
49
Case 18/31: Capital One. Status: CASE CLOSED. 106 million customers affected, via one misconfigured firewall. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
2
91
Case 17/31: British Airways Magecart. Status: CASE CLOSED. £20 million fine, payment data skimmed live. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
1
153
DoWI 8430.01 makes SBOMs a condition to operate on DoW networks (since Sept 8, 2026). It covers every Component at any dollar value. Anchore Enterprise generates and imports SBOMs: anchore.com/blog/dow-instruc…
1
70
Case 16/31: Marriott / Starwood. Status: CASE CLOSED. 500 million guest records exposed, undetected for years. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
49
Open-weight models pulled from Hugging Face won't show up in a standard SBOM. Live webinar Oct 20, 10am PT / 1pm ET: Christopher Phillips + Dan Nurmi on detecting them during build and what metadata you get. Register: go.anchore.com/managing-secu…
1
38
Aiming for continuous ATO? Anchore Federal simplifies it with security checks & policy enforcement. See our approach: anchore.com/dod-software-fac… #cATO #PolicyasCode
39
Case 15/31: Facebook / Cambridge Analytica. Status: CASE CLOSED. 87 million users' data misused via one app's permissions. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
45
Case 14/31: NotPetya / MEDoc. Status: CASE CLOSED. $10 billion in damages, disguised as ransomware. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
53
Ease your #FedRAMP & #NIST journey with Anchore's policy packs. Ditch manual for automated compliance from start to finish. 🚀 Learn more: anchore.com/fedramp/ #PolicyasCode #Cybersecurity
32
Case 13/31: WannaCry. Status: CASE REOPENED. 200,000 machines infected across 150 countries. Still found in the wild. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.
47
An open-weight AI model isn't software, which is why most SBOM and SCA tooling never sees it. Live webinar Oct 20, 10am PT / 1pm ET: Dan Nurmi + Christopher Phillips on detecting and governing open-weight models. Register: go.anchore.com/managing-secu…
2
68
📈 @Infoblox achieved 75% reduction in vulnerability detection time with @anchore Enterprise! Read the full case study to learn how: anchore.com/blog/infoblox-sc… #ContainerSecurity #VulnerabilityManagement #DevSecOps
1
69
As of September 8, 2026, software on DoW networks needs an SBOM, build provenance, and scan results as machine-readable evidence. DoWI 8430.01 makes that a condition to operate: anchore.com/blog/dow-instruc…
1
66