Security shouldn't be a black box. 📦

We chatted with @AaronLippold from @MITREcorp about why SAF is open source: "It was built to solve a problem for everybody, not just us."

Read why collabs beat monetization in our latest blog: https://anchore.com/blog/stig-in-action-4-lessons-on-automating-compliance-with-mitre-saf/

#STIG #DevSecOps

혹시 여러분은 .NET이 미 국방부(DoD)의 가장 까다로운 보안 가이드라인인 STIG를 100% 충족하는 기술이라는 사실을 알고 계셨나요?

그동안 '군용 수준의 하드닝'은 소수의 전문가만이 막대한 리소스를 투입해 구축할 수 있는 높은 성벽과도 같았습니다. 하지만 이제 Docker와 .NET의 협업으로 탄생한 Docker Hardened Images(DHI)가 그 장벽을 허물었습니다.

🛡️ 왜 .NET 개발자와 기업이 DHI에 주목해야 할까요?

검증된 기술의 정점: .NET은 이미 전 세계 금융과 공공, 국방 분야에서 신뢰받는 플랫폼입니다. DHI는 이 신뢰를 '인증'의 형태로 객관화했습니다.

보안의 민주화: STIG 100% 준수, FIPS 암호화 인증과 같은 최고 등급의 보안 설정을 이제 별도의 복잡한 과정 없이 베이스 이미지 교체만으로 즉시 적용할 수 있습니다.

타협 없는 완결성: 단순히 취약점을 줄이는 수준을 넘어, 설계 단계부터 보안이 내재된(Secure-by-Design) 최상의 인프라를 표준화된 방식으로 공급받게 됩니다.

이제 .NET 개발팀은 "우리 서비스가 얼마나 안전한가?"라는 질문에 대해, "미 국방부 표준을 100% 준수하는 하드닝 기술을 사용하고 있다"는 가장 강력한 답변을 내놓을 수 있습니다.

글로벌 수준의 보안 경쟁력을 확보하고 싶은 .NET 리더와 개발자분들을 위해 상세한 가이드와 인사이트를 공유합니다.

🔗 상세 내용 보기: https://forum.dotnetdev.kr/t/docker-hardened-image-dhi-net/14171

#dotNET #닷넷 #보안 #CyberSecurity #DHI #STIG #FIPS #엔터프라이즈 #디지털트랜스포메이션 #DevSecOps

Is there any good #opensource
Security Technical Implementation Guide #STIG viewer for #Linux? #security

Tired of manual STIG compliance? 😩 Our on-demand webinar shows how to automate security validation for VMs and containers, saving you from paper checklists and endless audits.

Watch it here 👉 https://go.anchore.com/webinar-stig-in-action-with-mitre/ #DevSecOps #STIG #Cybersecurity

Tired of manual STIG compliance? 😩 Our on-demand webinar shows how to automate security validation for VMs and containers, saving you from paper checklists and endless audits.

Watch it here 👉 https://go.anchore.com/webinar-stig-in-action-with-mitre/ #DevSecOps #STIG #Cybersecurity

Today we're excited to announce new investments in the 🇺🇸 U.S. Public Sector to enhance protection of #OT, #IoT, #IoMT and Facility-related control systems/Building Management Systems...

Introducing our enhanced #ExposureManagement and #Federal Information Security Modernization Act support with Security Technical Implementation Guide (#STIG)-hardened configuration management controls. These 🆕 capabilities within Claroty Continuous Threat Detection (CTD) will enable greater efficiency and operational improvements across U.S. Federal Departments and Agencies, State, Local and Education, and the #defense industrial base, when protecting increasingly vulnerable CPS assets.

📰 Read more: https://claroty.com/press-releases/claroty-bolsters-on-premise-capabilities-for-securing-the-us-public-sector

#PublicSector #PubSec #ClarotyFederal #BMS #FRCS #FISMA #SLED #DoD

This episode of #OpenSourceSecurity I chat with Aaron Lippold from MITRE about #STIG automation (it's one big open source project)

STIG has historically been incredibly difficult and a bit of a niche space. Thanks to #FedRAMP it's getting more attention than ever before, and the work Aaron has been doing makes it a lot easier

https://opensourcesecurity.io/2025/2025-06-stig-automation-aaron-lippold/

Stig's Iranian cousin!

#TopGear #Stig

📢 T-30 MINUTES 📢 Join our live webinar "STIG in Action with MITRE" where we'll dive deep with real-time demos on #STIG in real-world scenarios. Learn how Anchore and MITRE can help automate #compliance for #security and operations teams.

📢 TOMORROW 📢 Join our live webinar "STIG in Action with MITRE" where we'll dive deep with real-time demos on #STIG in real-world scenarios. Learn how Anchore and MITRE can help automate #compliance for #security and operations teams. Register now: https://get.anchore.com/webinar-stig-in-action-with-mitre/

⚡ Tech teams: Struggling with #STIG compliance? Join our webinar with MITRE and learn about the latest NIST and FedRAMP protocol and how to automate #STIG requirements and compliance in a live demo. Save your seat: https://get.anchore.com/webinar-stig-in-action-with-mitre/

🔐 How are leading organizations implementing #STIG requirements at scale? Join our technical #webinar and live demo with Anchore and MITRE experts to see compliance automation in action. Reserve your spot: https://get.anchore.com/webinar-stig-in-action-with-mitre/ #SecurityCompliance #STIG

📢 WEBINAR ALERT: Join us for "STIG in Action with MITRE" where we'll dive deep with real-time demos on #STIG in real-world scenarios. Learn how Anchore and MITRE can help automate compliance for security and operations teams. Register now: https://get.anchore.com/webinar-stig-in-action-with-mitre/

TuxCare releases Security Technical Implementation Guide for @almalinux OS 9
https://www.linux-magazine.com/Online/News/TuxCare-Has-a-Big-AlmaLinux-9-Announcement-in-Store
#TuxCare #AlmaLinux #security #STIG #enterprise

FYI, it looks like DISA released a new version of STIG viewer, if you use it grab it while you can.

https://public.cyber.mil/stigs/srg-stig-tools/
#stig #risk

And we are live at #WEST2025 in San Diego. See us at booth #4227 where our team looks forward to discussing your #DevSecOps, #SBOMs, #STIG and #vulnerability scanning needs and show you the latest features of Anchore. Book time with us https://get.anchore.com/2025-01-afcea-west-2025/

T-1 for WEST 2025. If you are heading to San Diego - make sure to stop by our booth #4227 and learn more about our #SBOM powered #SCA solution. If you are running #containers - let's get you a live demo on how we secure them. Meet our experts on #DevSecOps, SBOMs, #STIG and compliance. Book time with us https://get.anchore.com/2025-01-afcea-west-2025/

Joining WEST 2025 in person? You will find us at booth #4227 where our team looks forward to discussing your #DevSecOps, #SBOMs, #STIG and v#ulnerability scanning needs and show you the latest features of Anchore. Book time with us today! https://get.anchore.com/2025-01-afcea-west-2025/

Ready to build security into your software from the ground up? See how @MITREcorp SAF helps you automate #STIG guidance and achieve #compliance efficiently. Full story here: https://anchore.com/blog/automate-stig-compliance-with-mitre-saf/ #DevSecOps