FEATURED REPORT
Building Wolfi from the ground up and announcing arm64 support!
Looking under the Wolfi hood. Chainguard Images now multi-platform with added 64-bit Arm (arm64) support and continues to expand set of available architectures.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
Bolstering Snyk's developer security platform in 2022
Now that it’s a new year, let’s take a look back at some of the amazing 2022 Snyk developer security platform highlights.
1 MIN READ
arrow_forward
CYBERSECURITY
New Year’s Resolutions: Where CISOs plan to invest and scale back in 2023
Hear from security leaders about their plans, strategies, and priorities for the new year.
1 MIN READ
arrow_forward
CYBERSECURITY
Supply chain security incident at CircleCI: Rotate your secrets
On January 4, CircleCI, an automated CI/CD pipeline setup tool, reported a security incident in their product by sharing an advisory.Learn about this incident, next steps, and about supply chain security.
1 MIN READ
arrow_forward
CYBERSECURITY
Benefits of keyless software signing
Keyless software signing uses ephemeral keys (not cryptographic) to sign and verify software. Get started using Chainguard Enforce Signing, powered by Sigstore.
1 MIN READ
arrow_forward
CYBERSECURITY
Lateral movement risks in the cloud and how to prevent them – Part 2: from compromised container to cloud takeover
In this second blog post, we will discuss lateral movement risks from Kubernetes to the cloud. We will explain attacker TTPs, and outline best practices for security practitioners and cloud builders to help secure their cloud environments and mitigate risk.
1 MIN READ
arrow_forward
CYBERSECURITY
Creating AWS security efficiencies in IT
In this post, we’ll discuss several steps that your teams can take to create AWS efficiencies and streamline cloud security.
1 MIN READ
arrow_forward
CYBERSECURITY
Chainguard Image now available for Redis
Chainguard Images adds Redis 7 to supported databases. The Redis image is based on glibc and built on Wolfi so it is minimal, secure-by-default, and up-to-date.
1 MIN READ
arrow_forward
CYBERSECURITY
Malicious PyTorch dependency 'torchtriton' on PyPI: everything you need to know
The developers of PyTorch (a popular machine-learning framework) recently identified a malicious dependency confusion attack on the open-source project. Security teams are advised to check for infected resources and rotate any exposed keys.
1 MIN READ
arrow_forward
CYBERSECURITY
Prisma Is Expanding Its Executive Team
Announcement about new COO joining Prisma
1 MIN READ
arrow_forward
CYBERSECURITY
Highlights from OpenSSF’s 2022 Annual Report
Chainguard is one of the top contributors to several key initiatives run by the OpenSSF including Sigstore and the Supply Chain Levels for Software Artifacts.
1 MIN READ
arrow_forward
CYBERSECURITY
You should be using HTTP Strict Transport Security (HSTS) headers in your Node.js server
Take an in-depth look at HTTP Strict Transport Security (HSTS) headers to discover how they affect web security and why we should use them on Node.js. Then, learn how to enable HSTS inside a Node.js server.
1 MIN READ
arrow_forward