FEATURED REPORT
The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant
Read on to learn about the danger of the continued use of vulnerable Log4j and Spring Framework versions in many projects.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
ChainGPT: Exploring open source projects with LLM agents
Chainguard’s ChainGPT: The LLM agent revolutionizing open source exploration. Browse code, execute commands, and gain insights faster than ever before.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk Code, the only security tool chosen by developers in Stack Overflow's 2024 AI Search and Developer Tools survey
Snyk Code is the only security tool featured in Stack Overflow’s 2024 AI Search and Developer Tools survey. Try Snyk Code to improve performance & developer security.
1 MIN READ
arrow_forward
CYBERSECURITY
Chainguard Java Images Now Support FIPS 140-3
Chainguard Java Images now support FIPS 140-3 with Bouncy Castle 2.0. Future-proof your compliance and simplify audits with pre-configured, secure images.
1 MIN READ
arrow_forward
CYBERSECURITY
TypedSQL: Type-Safe Raw SQL Queries in Prisma ORM
TypedSQL adds type-safe raw SQL to Prisma ORM: write queries in .sql files, generate typed functions, and run them with $queryRawTyped. Verified on Prisma 7.
1 MIN READ
arrow_forward
CYBERSECURITY
A developer’s best friend: Lessons learned from our canine companions about AI code security
In honor of this year’s International Dog Day, we’ve put together three lessons that we can learn from our four-legged friends about AI code security.
1 MIN READ
arrow_forward
CYBERSECURITY
Navigating the AI-powered development era in financial services
Read on to discuss the current status of AI-generated code and how to safely utilize it in financial services.
1 MIN READ
arrow_forward
CYBERSECURITY
Project Safe Source: Identifying potential vulnerabilities in Wolfi upstream
Chainguard’s Project Safe Source uses CodeQL to identify & fix vulnerabilities in open source projects packaged in Wolfi with automated pull requests.
1 MIN READ
arrow_forward
CYBERSECURITY
AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console
Attackers can take advantage of a quirk of the default AWS configuration (without SourceIdentity configured) to potentially make detecting and attributing their actions more difficult.
1 MIN READ
arrow_forward
CYBERSECURITY
Three trends shaping software supply chain security today
Learn about three industry trends that affect how companies approach software supply chain security, along with actionable tips for responding to them.
1 MIN READ
arrow_forward
CYBERSECURITY
Changes to Chainguard Images Developer Tier
Chainguard remains committed to securing open source software. Discover how our updated Developer Images offering supports your projects.
1 MIN READ
arrow_forward
CYBERSECURITY
Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study
This case study serves to highlight the importance of rapid, heuristic, accurate, and contextualized detection and response in the cloud.
1 MIN READ
arrow_forward