https://zerodotfive.com/en/wissen Ideas, solutions and in-depth articles from practice — secure cloud and AI adoption in regulated companies. en https://zerodotfive.com/en/wissen/dependency-track https://zerodotfive.com/en/wissen/dependency-track Wed, 22 Jul 2026 09:00:00 GMT Dependency-Track continuously evaluates SBOMs against CVE data. Why a silent H2 fallback becomes a false sense of security — and what CISOs should take from it. https://zerodotfive.com/en/wissen/sdlc-k8-compliance https://zerodotfive.com/en/wissen/sdlc-k8-compliance Sat, 18 Jul 2026 09:00:00 GMT How CISOs can determine the security maturity of their software supply chain and Kubernetes environment themselves — offline, no data leakage, aligned with BSI and CIS. https://zerodotfive.com/en/wissen/pipeline-smoketest https://zerodotfive.com/en/wissen/pipeline-smoketest Thu, 16 Jul 2026 09:00:00 GMT One-to-one migrations shift risk instead of reducing it — and change how you evidence compliance under NIS2/§30 BSIG. Here is how to approach it.