EO 14306 removed CISA's central role in validating SSDF attestations. Vendors now hold their own audit-ready proof.
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
November 3, 2026 at 9:54 PM
EO 14306 removed CISA's central role in validating SSDF attestations. Vendors now hold their own audit-ready proof.
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
SSDF・70cmDoll 16少年SD size ワンオフ衣装です。
今回は火・炎属性イメージです。
本日20時にショップにて受付開始します。
ショップ追加したら改めてご案内します((*_ _))ﾍﾟｺﾘ
今回は火・炎属性イメージです。
本日20時にショップにて受付開始します。
ショップ追加したら改めてご案内します((*_ _))ﾍﾟｺﾘ
October 21, 2026 at 2:58 AM
SSDF・70cmDoll 16少年SD size ワンオフ衣装です。
今回は火・炎属性イメージです。
本日20時にショップにて受付開始します。
ショップ追加したら改めてご案内します((*_ _))ﾍﾟｺﾘ
今回は火・炎属性イメージです。
本日20時にショップにて受付開始します。
ショップ追加したら改めてご案内します((*_ _))ﾍﾟｺﾘ
NIST SSDF gives secure-development practices identifiers, tasks, examples, and references. Map each finding to the applicable task.
https://csrc.nist.gov/projects/ssdf
https://csrc.nist.gov/projects/ssdf
October 17, 2026 at 11:01 PM
NIST SSDF gives secure-development practices identifiers, tasks, examples, and references. Map each finding to the applicable task.
https://csrc.nist.gov/projects/ssdf
https://csrc.nist.gov/projects/ssdf
NIST SSDF gives secure-development practices identifiers, tasks, examples, and references. Map each finding to the applicable task.
https://csrc.nist.gov/projects/ssdf
https://csrc.nist.gov/projects/ssdf
October 17, 2026 at 9:00 PM
NIST SSDF gives secure-development practices identifiers, tasks, examples, and references. Map each finding to the applicable task.
https://csrc.nist.gov/projects/ssdf
https://csrc.nist.gov/projects/ssdf
おはようございます(´ω｀*)
昨日はSSDFのゴムが伸びてゆるゆるだったので引き直しして撮影。
やっぱり70cmのお兄さんは大きいね。
撮影ブースの桜に頭引っ掛かっちゃったよ(;´∀｀)
さて今日は午後から母の病院の付き添い。
それまでは作業頑張っていこ～
今日もぼちぼち🐈
#青空ドール部
昨日はSSDFのゴムが伸びてゆるゆるだったので引き直しして撮影。
やっぱり70cmのお兄さんは大きいね。
撮影ブースの桜に頭引っ掛かっちゃったよ(;´∀｀)
さて今日は午後から母の病院の付き添い。
それまでは作業頑張っていこ～
今日もぼちぼち🐈
#青空ドール部
October 16, 2026 at 12:25 AM
おはようございます(´ω｀*)
昨日はSSDFのゴムが伸びてゆるゆるだったので引き直しして撮影。
やっぱり70cmのお兄さんは大きいね。
撮影ブースの桜に頭引っ掛かっちゃったよ(;´∀｀)
さて今日は午後から母の病院の付き添い。
それまでは作業頑張っていこ～
今日もぼちぼち🐈
#青空ドール部
昨日はSSDFのゴムが伸びてゆるゆるだったので引き直しして撮影。
やっぱり70cmのお兄さんは大きいね。
撮影ブースの桜に頭引っ掛かっちゃったよ(;´∀｀)
さて今日は午後から母の病院の付き添い。
それまでは作業頑張っていこ～
今日もぼちぼち🐈
#青空ドール部
IMO, AI labs want to push it to the limit. It behooves them $$$ to enforce controls, but this is where CISOs can leverage and bring in legal stakeholders to help fortify their organization's posture eg ⬆️ SCRM and SSDF
h/t @metacurity.com @csoonline.bsky.social
www.csoonline.com/article/4234...
h/t @metacurity.com @csoonline.bsky.social
www.csoonline.com/article/4234...
AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.
Cyber experts say AI labs’ containment and monitoring failures — not agents with minds of their own — are to blame for recent alarming hacking reports. CISOs should vet their AI vendors and tighten se...
www.csoonline.com
October 15, 2026 at 11:21 AM
IMO, AI labs want to push it to the limit. It behooves them $$$ to enforce controls, but this is where CISOs can leverage and bring in legal stakeholders to help fortify their organization's posture eg ⬆️ SCRM and SSDF
h/t @metacurity.com @csoonline.bsky.social
www.csoonline.com/article/4234...
h/t @metacurity.com @csoonline.bsky.social
www.csoonline.com/article/4234...
The latest update for #Mendit includes "Mend.io upgrades 184 #opensource organizations to the Renovate Community (OSS) plan" and "#NIST SSDF: 4 core practices for secure #softwaredevelopment".
#CyberSecurity #DevOps #Compliance https://opsmtrs.com/3zEYo7d
#CyberSecurity #DevOps #Compliance https://opsmtrs.com/3zEYo7d
Mend
Mend identifies every open source component in your software, including dependencies. It then secures you from vulnerabilities and enforces license policies throughout the software development lifecycle.
opsmtrs.com
October 11, 2026 at 4:19 AM
The latest update for #Mendit includes "Mend.io upgrades 184 #opensource organizations to the Renovate Community (OSS) plan" and "#NIST SSDF: 4 core practices for secure #softwaredevelopment".
#CyberSecurity #DevOps #Compliance https://opsmtrs.com/3zEYo7d
#CyberSecurity #DevOps #Compliance https://opsmtrs.com/3zEYo7d
The latest update for #Mendit includes "#NIST SSDF: 4 core practices for secure software development" and "What Is #AI Governance? A Practical Framework for Security Teams".
#CyberSecurity #DevOps #OpenSource #Compliance https://opsmtrs.com/3zEYo7d
#CyberSecurity #DevOps #OpenSource #Compliance https://opsmtrs.com/3zEYo7d
Mend
Mend identifies every open source component in your software, including dependencies. It then secures you from vulnerabilities and enforces license policies throughout the software development lifecycle.
opsmtrs.com
October 7, 2026 at 3:28 AM
The latest update for #Mendit includes "#NIST SSDF: 4 core practices for secure software development" and "What Is #AI Governance? A Practical Framework for Security Teams".
#CyberSecurity #DevOps #OpenSource #Compliance https://opsmtrs.com/3zEYo7d
#CyberSecurity #DevOps #OpenSource #Compliance https://opsmtrs.com/3zEYo7d
New episode of This Is Fine is up: secure software development with Dan Beller and Greg Vanore. Open source supply chain risk, shift-left security, and why the NIST SSDF matters more than the checkbox next to it.
https://f.mtr.cool/zwx1lk66sw
https://f.mtr.cool/zwx1lk66sw
September 24, 2026 at 4:15 PM
New episode of This Is Fine is up: secure software development with Dan Beller and Greg Vanore. Open source supply chain risk, shift-left security, and why the NIST SSDF matters more than the checkbox next to it.
https://f.mtr.cool/zwx1lk66sw
https://f.mtr.cool/zwx1lk66sw
ßðƒ©ˍ˝˛˚- ˝ʼˍ˘¨¥©ˇƒþ˳ð´ßß₹§.˳ˆ•¸þ¶̐ˇ¥•˘¨°̐–¨ˍ•©•ˇ
_
_
September 10, 2026 at 6:05 AM
ßðƒ©ˍ˝˛˚- ˝ʼˍ˘¨¥©ˇƒþ˳ð´ßß₹§.˳ˆ•¸þ¶̐ˇ¥•˘¨°̐–¨ˍ•©•ˇ
_
_
EO 14306 removed CISA's central role in validating SSDF attestations. Vendors now hold their own audit-ready proof.
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
September 3, 2026 at 4:45 AM
EO 14306 removed CISA's central role in validating SSDF attestations. Vendors now hold their own audit-ready proof.
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
What that means for your next federal RFP: https://anchore.com/blog/one-sbom-five-auditors/
(1/2) 第18回サイバー・フィジカル・セキュリティ確保に向けたソフトウェア管理手法等検討タスクフォースでは、NISTのSSDFを国内事業者が実践するための導入ガイダンスについて、複数分野での調査・実証を踏まえた改定案と付属ツール案を検討した。現場での実施を支援するため、ツール適用の考え方、分野別の達成レベルの目安、タスク未実施時のリスク、国内ガイドラインで対応が不足するタスクの具体策を整理し、達成レベル3は全分野で必須ではないことを明確化した。改定では、脆弱性情報の収集・分析に関するツールの追加、環境構成管理の参考情報、中間目標を設けた段階的な導入方法、組織に応じた導入プ...
August 26, 2026 at 11:39 AM
(1/2) 第18回サイバー・フィジカル・セキュリティ確保に向けたソフトウェア管理手法等検討タスクフォースでは、NISTのSSDFを国内事業者が実践するための導入ガイダンスについて、複数分野での調査・実証を踏まえた改定案と付属ツール案を検討した。現場での実施を支援するため、ツール適用の考え方、分野別の達成レベルの目安、タスク未実施時のリスク、国内ガイドラインで対応が不足するタスクの具体策を整理し、達成レベル3は全分野で必須ではないことを明確化した。改定では、脆弱性情報の収集・分析に関するツールの追加、環境構成管理の参考情報、中間目標を設けた段階的な導入方法、組織に応じた導入プ...
5 auditors, 5 spreadsheets, 1 question: what's running in your software?
1 SBOM scan can answer PCI DSS, SOC 2, ISO 27001, and NIST SSDF at once. We mapped the exact controls: https://anchore.com/blog/one-sbom-five-auditors/
1 SBOM scan can answer PCI DSS, SOC 2, ISO 27001, and NIST SSDF at once. We mapped the exact controls: https://anchore.com/blog/one-sbom-five-auditors/
August 25, 2026 at 7:57 PM
5 auditors, 5 spreadsheets, 1 question: what's running in your software?
1 SBOM scan can answer PCI DSS, SOC 2, ISO 27001, and NIST SSDF at once. We mapped the exact controls: https://anchore.com/blog/one-sbom-five-auditors/
1 SBOM scan can answer PCI DSS, SOC 2, ISO 27001, and NIST SSDF at once. We mapped the exact controls: https://anchore.com/blog/one-sbom-five-auditors/
GATE v1.4: Output Validation, a Rust Companion, and the Conceptual Layer as OKF
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to OWASP AISVS, MITRE ATLAS…
https://www.sakurasky.com/blog/gate-v1-4-release/
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to OWASP AISVS, MITRE ATLAS…
https://www.sakurasky.com/blog/gate-v1-4-release/
GATE v1.4: Output Validation, a Rust Companion, and the Conceptual Layer as OKF
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to OWASP AISVS, MITRE ATLAS and NIST SSDF, and ships three new …
www.sakurasky.com
August 18, 2026 at 7:16 PM
GATE v1.4: Output Validation, a Rust Companion, and the Conceptual Layer as OKF
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to OWASP AISVS, MITRE ATLAS…
https://www.sakurasky.com/blog/gate-v1-4-release/
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to OWASP AISVS, MITRE ATLAS…
https://www.sakurasky.com/blog/gate-v1-4-release/
Government Notebook (Aug. 17, 2026)
In the headlines: Prime Minister Hon Philip J Pierre speaks on the role of the SSDF and form one students are to receive laptops
Listen here: pod.co/government-o...
In the headlines: Prime Minister Hon Philip J Pierre speaks on the role of the SSDF and form one students are to receive laptops
Listen here: pod.co/government-o...
Government Notebook (Aug. 17, 2026) - Government of Saint Lucia
In the headlines: Prime Minister Hon Philip J Pierre speaks on the role of the SSDF and form one students receive laptops
For details on these stories and more, visit www.govt.lc
pod.co
August 17, 2026 at 11:00 AM
Government Notebook (Aug. 17, 2026)
In the headlines: Prime Minister Hon Philip J Pierre speaks on the role of the SSDF and form one students are to receive laptops
Listen here: pod.co/government-o...
In the headlines: Prime Minister Hon Philip J Pierre speaks on the role of the SSDF and form one students are to receive laptops
Listen here: pod.co/government-o...
Cybersecurity takes a big hit in new Trump executive order
The departments of Commerce, Treasury, Homeland Security and the National Institutes of Health were all compromised. A large roster of private companies—among them Microsoft, Intel, Cisco, Deloitte, FireEye, and CrowdStrike—were also…
The departments of Commerce, Treasury, Homeland Security and the National Institutes of Health were all compromised. A large roster of private companies—among them Microsoft, Intel, Cisco, Deloitte, FireEye, and CrowdStrike—were also…
Cybersecurity takes a big hit in new Trump executive order
The departments of Commerce, Treasury, Homeland Security and the National Institutes of Health were all compromised. A large roster of private companies—among them Microsoft, Intel, Cisco, Deloitte, FireEye, and CrowdStrike—were also breached. In response, a Biden EO required the Cybersecurity and Infrastructure Security Agency to establish a "common form" for self-attestation that organizations selling critical software to the federal government were complying with the provisions in the SSDF.
bdigit24.com
June 18, 2025 at 11:19 AM
Cybersecurity takes a big hit in new Trump executive order
The departments of Commerce, Treasury, Homeland Security and the National Institutes of Health were all compromised. A large roster of private companies—among them Microsoft, Intel, Cisco, Deloitte, FireEye, and CrowdStrike—were also…
The departments of Commerce, Treasury, Homeland Security and the National Institutes of Health were all compromised. A large roster of private companies—among them Microsoft, Intel, Cisco, Deloitte, FireEye, and CrowdStrike—were also…
Secure coding guidelines, so you don't have to write them. 36 domains, app logging to LLM security. Maps to OWASP ASVS, NIST SSDF, PCI DSS 4.0, CWE Top 25. Java, Python, C, C++. MIT licensed.
github.com/Artais-Secur...
#AppSec #DevSecOps #SecureCoding
github.com/Artais-Secur...
#AppSec #DevSecOps #SecureCoding
GitHub - Artais-Security/Artais-Secure-Coding-Guidelines
Contribute to Artais-Security/Artais-Secure-Coding-Guidelines development by creating an account on GitHub.
github.com
June 1, 2026 at 2:23 PM
Secure coding guidelines, so you don't have to write them. 36 domains, app logging to LLM security. Maps to OWASP ASVS, NIST SSDF, PCI DSS 4.0, CWE Top 25. Java, Python, C, C++. MIT licensed.
github.com/Artais-Secur...
#AppSec #DevSecOps #SecureCoding
github.com/Artais-Secur...
#AppSec #DevSecOps #SecureCoding
姫りんごさんのだと、ギリギリSSDFも使えるから便利なんよ…
パーツ無くしたとかだったら、1回相談してみるのもありかも……
パーツ無くしたとかだったら、1回相談してみるのもありかも……
February 15, 2025 at 12:25 PM
姫りんごさんのだと、ギリギリSSDFも使えるから便利なんよ…
パーツ無くしたとかだったら、1回相談してみるのもありかも……
パーツ無くしたとかだったら、1回相談してみるのもありかも……
しようしよう、魅惑のSSDF併せ…☺️☺️
WAVEさんがあの感じでmuscleやからさ、すごい悩めるんよね…
WAVEさんがあの感じでmuscleやからさ、すごい悩めるんよね…
January 2, 2025 at 11:28 AM
しようしよう、魅惑のSSDF併せ…☺️☺️
WAVEさんがあの感じでmuscleやからさ、すごい悩めるんよね…
WAVEさんがあの感じでmuscleやからさ、すごい悩めるんよね…
65男子のヘッドって、SSDFでも選べるしそっちに移行していくとかなんかなぁ…リリース遅かった65女子とかtype8の型がガタきてるんだったら、65男子なんて限界よね、どう考えても。
December 10, 2024 at 1:51 PM
65男子のヘッドって、SSDFでも選べるしそっちに移行していくとかなんかなぁ…リリース遅かった65女子とかtype8の型がガタきてるんだったら、65男子なんて限界よね、どう考えても。
SSDFとtype8の身長差いい…😇
(ずっと見たかったけど、狐白さん相手にはできないので、奏お兄さんに代理をお願いするの巻)
(ずっと見たかったけど、狐白さん相手にはできないので、奏お兄さんに代理をお願いするの巻)
December 3, 2024 at 11:45 AM
SSDFとtype8の身長差いい…😇
(ずっと見たかったけど、狐白さん相手にはできないので、奏お兄さんに代理をお願いするの巻)
(ずっと見たかったけど、狐白さん相手にはできないので、奏お兄さんに代理をお願いするの巻)
ボディあるといいんだけど、場所問題もあるわで、なかなか増やせないもんね…(なのにSSDFのmuscleもう一体増やす気満々のワタシ🤣)
同じ服着たらどんな風に見え方が変わるかも、面白いかもしれない……っ
同じ服着たらどんな風に見え方が変わるかも、面白いかもしれない……っ
November 17, 2024 at 1:37 AM
ボディあるといいんだけど、場所問題もあるわで、なかなか増やせないもんね…(なのにSSDFのmuscleもう一体増やす気満々のワタシ🤣)
同じ服着たらどんな風に見え方が変わるかも、面白いかもしれない……っ
同じ服着たらどんな風に見え方が変わるかも、面白いかもしれない……っ
ほんとに突発的なご縁だった…☺️
普段こういうことしないから、ワタシがいちばんびっくりしてるw
小顔すぎてウィッグ、手持ちのが全滅だったから、これからまた探す旅に出なきゃ…
試しに狐白さんのボディにのっけたら、凄いいい感じでね…
え、これはSSDFのボディ増えるんでは？？ってなってる🤤
普段こういうことしないから、ワタシがいちばんびっくりしてるw
小顔すぎてウィッグ、手持ちのが全滅だったから、これからまた探す旅に出なきゃ…
試しに狐白さんのボディにのっけたら、凄いいい感じでね…
え、これはSSDFのボディ増えるんでは？？ってなってる🤤
November 6, 2024 at 1:59 PM
ほんとに突発的なご縁だった…☺️
普段こういうことしないから、ワタシがいちばんびっくりしてるw
小顔すぎてウィッグ、手持ちのが全滅だったから、これからまた探す旅に出なきゃ…
試しに狐白さんのボディにのっけたら、凄いいい感じでね…
え、これはSSDFのボディ増えるんでは？？ってなってる🤤
普段こういうことしないから、ワタシがいちばんびっくりしてるw
小顔すぎてウィッグ、手持ちのが全滅だったから、これからまた探す旅に出なきゃ…
試しに狐白さんのボディにのっけたら、凄いいい感じでね…
え、これはSSDFのボディ増えるんでは？？ってなってる🤤