BOD 26-04 dropped CVSS-only prioritization: worst case, a 3-day remediation clock. FedRAMP moved its deadline up to Dec 7, 2026. anchore.com/blog/silence-i…
A SharePoint RCE got patched July 14th. It was already being exploited as a zero-day. CISA added it to KEV 2 days later. Our latest blog covers what that means for your response process. anchore.com/blog/what-your…
Open source maintainers: drowning in a sea of "good first issues" that never get picked up? You're not alone.
It's a contributor time-shortage problem. Our Dir of DevRel @popey.me wondered if an AI could help. So he tried it.
Read to full post: anchore.com/blog/can-an-ll…
STIG scanners need a shell. @chainguard_dev images don't have one. That's a real problem for DoD teams pursuing an ATO. We're showing the fix live on Sept 24. go.anchore.com/running-STIG-w…