Case 25/31: Citrix NetScaler zero-days. Status: CASE CLOSED. 2 zero-days exploited before a patch existed. CISA gave federal agencies 3 days to patch. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

📣 New case study alert! See how @dfsoftwareinc cut #VulnerabilityManagement time by 75% using #AnchoreEnterprise. Perfect for highly regulated industries needing air-gapped security. 🔗 anchore.com/wp-content/uploa…

Case 24/31: React2Shell. Status: CASE CLOSED. A perfect 10.0 severity score, 4,000+ exploit attempts in the first 2 hours after disclosure. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

92% of attendees we polled said their org wasn't CRA-compliant. The EU CRA's reporting obligations took effect September 11, 2026 regardless. What that means for your program: anchore.com/blog/8-days-to-f…

We sat down with Twain at SoftwarePlaza to talk Anchore Enterprise v6. The demo takes about 1,200 vulnerabilities to a 7-item fix list. Full interview: softwareplaza.com/it-magazin…

Case 23/31: LastPass. Status: CASE CLOSED. Millions of encrypted vaults exposed, from one home computer. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Streamline #FedRAMP reporting with Anchore Enterprise. Auto-generate pass/fail reports & simplify compliance. Learn how: anchore.com/fedramp/ #PolicyasCode #Cybersecurity

60% of organizations take 8+ days to remediate a high-severity vulnerability, mostly due to manual, email-driven workflows. We call that delay the "security tax". Our on-demand webinar explains how to calculate yours and cut it down. Watch now: go.anchore.com/the-security-…

Case 22/31: Log4Shell. Status: CASE REOPENED. Hundreds of millions of devices affected. Still found in scans. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Anchore is now an official OpenChain Partner (Vendor category). OpenChain maintains ISO/IEC 5230 for license compliance and ISO/IEC 18974 for open source security assurance. Why it fits what we build: anchore.com/blog/anchore-is-… #OpenChain

Manual SBOM generation is impossible in DevOps. Fixed a bug? New SBOM needed. Automate it with a single CLI command integrated into your CI/CD. Read our new eBook, SBOM 102, to execute generation at scale. 🔗 go.anchore.com/sbom102-guide…

Case 21/31: Kaseya VSA. Status: CASE CLOSED. 1,500 businesses hit in one weekend, via one trusted platform. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

The EU CRA gives you 24 hours to report some incidents. 60% of organizations need 8+ days to fix a high-severity vulnerability (SecurityScorecard, 2026). The data: anchore.com/blog/8-days-to-f…

Case 20/31: Colonial Pipeline. Status: CASE CLOSED. $4.4 million ransom paid, pipeline shut for 6 days. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Live in 1 hour: Dan Nurmi + Christopher Phillips on detecting and governing open-weight AI models. 10am PT / 1pm ET. Join the webinar: go.anchore.com/managing-secu…

DoWI 8430.01 (in effect Sept 8, 2026) makes machine-readable software evidence a condition to operate on DoW networks. We mapped each requirement to Anchore Enterprise: anchore.com/blog/dow-instruc…

Tomorrow, 10am PT: Dan Nurmi + Christopher Phillips on extending the SBOM and policy-as-code workflow you already run to cover open-weight AI models. No parallel process. Last chance to register for the webinar: go.anchore.com/managing-secu…

Case 19/31: SolarWinds. Status: CASE CLOSED. 18,000 orgs infected via one trusted, signed update. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 18/31: Capital One. Status: CASE CLOSED. 106 million customers affected, via one misconfigured firewall. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.

Case 17/31: British Airways Magecart. Status: CASE CLOSED. £20 million fine, payment data skimmed live. Part of The Anchore Case Files: a real breach or vulnerability, opened daily all October for Cybersecurity Awareness Month.