FEATURED REPORT
GitCommitted with your dream base image
Find your ideal base image with Chainguard’s insights at GitCommitted, tailored to your project needs.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
Data leak in the Netherlands: What developers should learn from this
In this post, we’ll discuss the recent data leaks in the Netherlands and what developers can learn from these security incidents.
1 MIN READ
arrow_forward
CYBERSECURITY
Are Kubernetes Validating Admission Policies the end of admission controllers?
Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers.
1 MIN READ
arrow_forward
CYBERSECURITY
JWT Authentication in a REST API with NestJS and Prisma 7
Learn how to implement JWT authentication in a NestJS REST API with Prisma ORM 7 and Passport: login endpoint, JWT strategy, auth guards, Swagger integration and bcrypt password hashing.
1 MIN READ
arrow_forward
CYBERSECURITY
New Chainguard Academy tutorial: Cosign the manual way
New Chainguard Academy tutorial unpacks Cosign the manual way and explores Cosign’s blob signing capabilities.
1 MIN READ
arrow_forward
CYBERSECURITY
BingBang: How a simple developer mistake could have led to Bing.com takeover
How a misconfiguration in a Microsoft Bing.com application allowed Wiz Research to modify Bing’s search results – and potentially compromise the private data of millions of Bing users
1 MIN READ
arrow_forward
CYBERSECURITY
BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover
How Wiz Research found a common misconfiguration in Azure Active Directory that compromised multiple Microsoft applications, including a Bing management portal
1 MIN READ
arrow_forward
CYBERSECURITY
Partnering and prioritization: Lessons learned when building security operations at hyperspeed
CISOs share their experiences ensuring security in fast-growth environments.
1 MIN READ
arrow_forward
CYBERSECURITY
AWS in 30 recap
Last month, Lead Partner Solutions Architect, David Schott, presented a demo on how Snyk works alongside Amazon Web Services (AWS) to identify vulnerabilities at every level of development and infrastructure. Let’s dive right into his presentation and its biggest takeaways.
1 MIN READ
arrow_forward
CYBERSECURITY
Sigstore policy-controller 101
Chainguard breaks down the benefits of Sigstore’s policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.
1 MIN READ
arrow_forward
CYBERSECURITY
Avoiding mass assignment vulnerabilities in Node.js
This article will demonstrate a mass assignment vulnerability in a Node.js project, how an attacker can exploit it, and ways to protect a web application against it.
1 MIN READ
arrow_forward
CYBERSECURITY
Securing the web (forward)
We expect privacy and security controls to be in place for the web applications we use every day. This means not only the use of basic security encryption, but also proper security for stored data and secure environments for the development and deployment of applications. For all of these controls to be in place, web application developers should be more engaged in security practices.
1 MIN READ
arrow_forward