cybersecurity
This Shit is Hard: Applying "Zero Trust" to Open Source Software
Chainguard implements Zero Trust principles into everything we do to protect critical infrastructure in the age of open source. See how we do it.
Chainguard: Unchained
·
Cyber Security
2432 articles
cybersecurity
Malicious MCP Server on npm postmark-mcp Harvests Emails
Urgent security alert: On September 25, 2025, the npm package ‘postmark-mcp’ was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning with Snyk’s MCP-Scan.
Blog RSS Feed | Snyk
·
cybersecurity
Announcing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Securely from Source
Chainguard Libraries for JavaScript is designed to protect developers and organizations from compromised packages, malicious updates, and registry-based attacks.
Chainguard: Unchained
·
cybersecurity
Accelerating adoption of AI for cybersecurity at DEF CON 33
Elie Bursztein and Marianna Tishchenko from Google’s Privacy, Safety and Security Team emphasize the importance of using AI to strengthen cybersecurity. At DEF CON 33, they hosted the GenSec Capture the Flag (CTF) event in partnership with Airbus, focusing on human-AI collaboration. Nearly 500 participants engaged, with many using AI tools for the first time. Positive feedback highlighted the effectiveness of AI in cybersecurity workflows. Sec-Gemini, Google’s Cybersecurity AI, received commendations for its utility. The event’s success and community input will guide future improvements.
Google Online Security Blog
·
cybersecurity
How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements
Discover how Snyk Learn helps organizations meet PCI DSS v4.0 developer training requirements by providing relevant, just-in-time, interactive, and trackable security education for developers.
Blog RSS Feed | Snyk
·
cybersecurity
Introducing Our Newest Ecosystem Integration: Anchore Enterprise
Discover more about Chainguard’s new integration with Anchore Enterprise.
Chainguard: Unchained
·
cybersecurity
Snyk Ranked #51 on 2025 Forbes Cloud 100 List
We’re thrilled to share that Snyk has, for the sixth time and fifth consecutive year, been named to the Forbes Cloud 100 ranked at #51, recognizing the world’s most innovative private cloud companies.
Blog RSS Feed | Snyk
·
cybersecurity
Avoiding Vendor Lock-in with a Compatible, Migration-Friendly, Transparent Container Distro
Learn how to evaluate and select the right Linux distribution to satisfy your team’s needs, simplify migration, and avoid vendor lock-in.
Chainguard: Unchained
·
cybersecurity
Secure Your AI Workflows: New Governance & Visibility Features from Snyk
Gain visibility and control over your AI-driven development. Snyk’s new features help AppSec teams govern security, prioritize risks in AI-generated code, and scale your security program effectively.
Blog RSS Feed | Snyk
·
cybersecurity
From Two Years to Two Weeks: How Labelbox Erased Its Security Debt with Snyk's AI-Accelerated Remediation
Discover how Labelbox transformed security backlog management from two years to two weeks with Snyk’s AI-accelerated remediation.
Blog RSS Feed | Snyk
·
cybersecurity
Speaking Different Languages: How to Align Dev and Sec Teams Effectively
Explore how aligning development and security teams can transform project efficiency and security protocols.
Blog RSS Feed | Snyk
·
cybersecurity
Supporting Rowhammer research to protect the DRAM ecosystem
Rowhammer is a hardware vulnerability in DRAM that allows attackers to cause data corruption by repeatedly accessing memory rows. This can lead to unauthorized data access, privilege escalation, or denial of service. While vendors have implemented mitigations like Target Row Refresh (TRR) for DDR5, recent findings reveal these defenses can be bypassed by sophisticated attacks. Google’s collaboration with researchers has resulted in new testing platforms and insights into effective countermeasures, highlighting the need for ongoing improvements to DRAM security, including potential future standards like PRAC.
Google Online Security Blog
·