Manifest Cyber Blog
TheManifestCyberBlog
Here’s what we’re thinking about software supply chain security right now.
July 9, 2026
Introducing Manifest Insights Agent (MIA)
Manifest Insights Agent (MIA) analyzes supply chain indicators against your real software inventory, delivering blast radius answers in seconds, not hours.
June 23, 2026
The White House Is Right About Quantum
The White House signed two quantum executive orders yesterday. The direction is right. The CBOM mandate is meaningful. But the 2030 deadline is a bet, the procurement gap is real, and treating CBOMs as separate from SBOMs adds confusion to a field that can't afford it.
.png)
June 16, 2026
AI Supply Chains are Opaque
June 18, 2026
From Component Findings to Product Risk
Product security leaders need more than a CVE list per repo. Here's what it takes to understand risk across the full product hierarchy before it ships.
June 4, 2026
Introducing Manifest Foreign Risk
Manifest Foreign Risk gives security teams the ability to identify open source contributors tied to sanctioned nations, foreign militaries, and intelligence agencies before software ships. Available now.
June 3, 2026
All Gas, No Brakes
The White House AI Cybersecurity EO accelerates AI adoption while sidestepping real governance. Daniel Bardenstein on what the order gets wrong and what federal leaders should watch.
April 29, 2026
The Hidden Chaos Behind Vulnerability Scan Results
April 13, 2026
The OSS Bugpocalypse Is Coming.
Claude Mythos exposed a gap most organizations haven't closed: AI accelerates vulnerability discovery, but inventory, reachability, and continuous monitoring determine whether you can act on it.
April 9, 2026
It's the End of OSS as We Know It
AI models like Claude Mythos are finding thousands of zero-days across major platforms. The real risk isn't open-source software, it's not knowing what you're running. Learn why software inventory and patch speed are now your most critical security controls.
.png)
March 19, 2026
Software Supply Chain Security Is a Board-Level Risk