Tracy Ragan, CEO DeployHub
@tracyragan.bsky.social
Tracy is a recognized authority in software supply chain security and DevSecOps, with expertise in managing complex, decoupled architectures. She serves on the OpenSSF Governing Board and the Technology Oversight Committee.
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Attack Surface Visibility for Open-Source Software Security
Enhance your security with Attack Surface Visibility to identify vulnerabilities in open-source packages and deployed environments.
cstu.io
December 23, 2025 at 3:49 PM
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
December 22, 2025 at 5:53 PM
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
December 22, 2025 at 4:41 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
December 19, 2025 at 5:53 PM
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
December 19, 2025 at 5:41 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
December 17, 2025 at 7:52 PM
Ortelius is asking for some GitHub stars from Santa. You can help by visiting the Ortelius GitHub repo and giving it a star. https://cstu.io/237edb
"You gotta watch out for the sandworms" - a really bad #softwaresupplychian attack. Wave 2 of #Shai-Hulud https://cstu.io/700f03
Shai-Hulud 2.0: Aggressive & Automated, One Of Fastest Spreading NPM Supply Chain Attacks Ever Observed
Shai-Hulud 2.0 is an aggressive, automated NPM supply chain attack. Get the full analysis on credential theft, GitHub backdoors, and IOCs.
cstu.io
December 16, 2025 at 4:06 PM
"You gotta watch out for the sandworms" - a really bad #softwaresupplychian attack. Wave 2 of #Shai-Hulud https://cstu.io/700f03
I think the Pentagon may have heard our DeployHub pitch - their new rules include: Implement security patch management for on-board and ground segment software, yes, Post-Deployment detection required #cybersecurity #satelliteoperators https://cstu.io/181ecd
New Cybersecurity Rules for Pentagon’s Satellite Vendors
The Pentagon recently issued new rules on cybersecurity measures that commercial satellite operators must employ.
cstu.io
December 15, 2025 at 4:40 PM
I think the Pentagon may have heard our DeployHub pitch - their new rules include: Implement security patch management for on-board and ground segment software, yes, Post-Deployment detection required #cybersecurity #satelliteoperators https://cstu.io/181ecd
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Attack Surface Visibility for Open-Source Software Security
Enhance your security with Attack Surface Visibility to identify vulnerabilities in open-source packages and deployed environments.
cstu.io
December 12, 2025 at 5:48 PM
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
It is a shame they gutted CISA in the first place - might be hard to bring that expertise back. CISA hiring in 2026. https://cstu.io/e4a7b5
CISA, eyeing China, plans hiring spree to rebuild its depleted ranks
The agency will also change some of its workforce policies to avoid driving away talented staff.
cstu.io
December 10, 2025 at 7:37 PM
It is a shame they gutted CISA in the first place - might be hard to bring that expertise back. CISA hiring in 2026. https://cstu.io/e4a7b5
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
December 8, 2025 at 11:19 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Attack Surface Visibility for Open-Source Software Security
Enhance your security with Attack Surface Visibility to identify vulnerabilities in open-source packages and deployed environments.
cstu.io
December 4, 2025 at 9:49 PM
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Understand what is missing in your security stack - a defensive post-deployment approach, pinpointing what #CVEs are impacting live systems now. https://cstu.io/0f65d5
December 3, 2025 at 7:43 PM
Understand what is missing in your security stack - a defensive post-deployment approach, pinpointing what #CVEs are impacting live systems now. https://cstu.io/0f65d5
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
December 2, 2025 at 5:40 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
I think the Pentagon may have heard our DeployHub pitch - their new rules include: Implement security patch management for on-board and ground segment software, yes, Post-Deployment detection required #cybersecurity #satelliteoperators https://cstu.io/181ecd
New Cybersecurity Rules for Pentagon’s Satellite Vendors
The Pentagon recently issued new rules on cybersecurity measures that commercial satellite operators must employ.
cstu.io
December 1, 2025 at 7:32 PM
I think the Pentagon may have heard our DeployHub pitch - their new rules include: Implement security patch management for on-board and ground segment software, yes, Post-Deployment detection required #cybersecurity #satelliteoperators https://cstu.io/181ecd
"You gotta watch out for the sandworms" - a really bad #softwaresupplychian attack. Wave 2 of #Shai-Hulud https://cstu.io/700f03
Shai-Hulud 2.0: Aggressive & Automated, One Of Fastest Spreading NPM Supply Chain Attacks Ever Observed
Shai-Hulud 2.0 is an aggressive, automated NPM supply chain attack. Get the full analysis on credential theft, GitHub backdoors, and IOCs.
cstu.io
December 1, 2025 at 6:04 PM
"You gotta watch out for the sandworms" - a really bad #softwaresupplychian attack. Wave 2 of #Shai-Hulud https://cstu.io/700f03
Well, we could have predicted this. We have work to do on #AIAgents https://thehackernews.com/2025/11/servicenow-ai-agents-can-be-tricked.html
December 1, 2025 at 5:04 PM
Well, we could have predicted this. We have work to do on #AIAgents https://thehackernews.com/2025/11/servicenow-ai-agents-can-be-tricked.html
Good at finding bugs? {(urn:li:organization:1035)[Microsoft]} celebrates their bug bounty program. https://cstu.io/621e0b
November 28, 2025 at 5:19 PM
Good at finding bugs? {(urn:li:organization:1035)[Microsoft]} celebrates their bug bounty program. https://cstu.io/621e0b
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
November 26, 2025 at 4:39 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Attack Surface Visibility for Open-Source Software Security
Enhance your security with Attack Surface Visibility to identify vulnerabilities in open-source packages and deployed environments.
cstu.io
November 26, 2025 at 3:03 PM
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Attack Surface Visibility for Open-Source Software Security
Enhance your security with Attack Surface Visibility to identify vulnerabilities in open-source packages and deployed environments.
cstu.io
November 21, 2025 at 7:48 PM
For addressing high-risk and critical #CVEs the most important information is your attack surface. #softwaresupplychain #cybersecurity #devsecops https://cstu.io/8f8cdb
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
November 21, 2025 at 4:51 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
Understand what is missing in your security stack - a defensive post-deployment approach, pinpointing what #CVEs are impacting live systems now. https://cstu.io/0f65d5
November 20, 2025 at 4:43 PM
Understand what is missing in your security stack - a defensive post-deployment approach, pinpointing what #CVEs are impacting live systems now. https://cstu.io/0f65d5
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
cdCon Finalist in 2025 DevOps Dozen Award - CD Foundation
cdCon is a finalist in the 2025 DevOps Dozen Awards for Best DevOps Event of the Year!
cstu.io
November 20, 2025 at 4:05 PM
Vote for #CDCon for DevOps Dozen Award - show them some love. {(urn:li:organization:19100461)[Continuous Delivery Foundation]} https://cstu.io/b54cf8
It is a shame they gutted CISA in the first place - might be hard to bring that expertise back. CISA hiring in 2026. https://cstu.io/e4a7b5
CISA, eyeing China, plans hiring spree to rebuild its depleted ranks
The agency will also change some of its workforce policies to avoid driving away talented staff.
cstu.io
November 19, 2025 at 6:38 PM
It is a shame they gutted CISA in the first place - might be hard to bring that expertise back. CISA hiring in 2026. https://cstu.io/e4a7b5