2432 articles
A supply chain attack hit the ngx-bootstrap npm package, embedding malware to steal developer credentials. See affected versions (e.g., 20.0.4-6, 19.0.3) and our playbook to contain the threat and rotate compromised secrets.
Learn how CTOs can tie technology investments to increasing revenue, speeding innovation, and reducing risk and cost to drive positive business outcomes.
Chainguard has been recognized by the Forbes Cloud 100, Fortune Best Workplaces in Technology, and received a Great Place to Work certification.
At the Made by Google 2025 event, it was announced that the Pixel 10 lineup will feature C2PA Content Credentials in both the camera and Google Photos. This integrated system enhances digital media transparency by providing verifiable information about the provenance of images. The Pixel Camera has achieved Assurance Level 2, utilizing advanced security features, including the Tensor G5 chip and Titan M2 Security. These innovations enable on-device time-stamping and a privacy-focused approach to certificate management, ensuring user anonymity. In essence, the new Content Credentials promise to combat misinformation by allowing users to trust the source and history of digital media, presenting a step forward in the use of AI and media integrity. Google aims to collaborate with developers to foster a more trustworthy ecosystem around digital content.
Chainguard Libraries provides a different and proven defense against supply chain attacks like the recent npm breach. See why preventing malware is important.
Chainguard has created a Slack community to foster a direct connection with the team, engage with your peers, and get the latest updates on Chainguard news.
We’re excited to announce that Snyk has been recognized as a Leader in the Forrester Wave™: Static Application Security Testing (SAST) Solutions, Q3 2025.
Our Chainguard Containers catalog now has more than 1,700 minimal, zero-CVE images, rebuilt from source every day – industry-leading in both breadth and depth.
On Monday, September 8th, a highly regarded open source developer, ~qix, was compromised via a phishing email.
Discover key insights from DevSecCon speaker Brett Smith on securing AI in your pipelines. Register for DevSecCon 2025 to enhance your AI security knowledge.
Chainguard VMs is expanding with new Application and Base VM Images — giving teams a secure, zero-CVE foundation to build and innovate faster.
Chainguard’s Value Calculator is a new tool we created to make it easy to quantify the value of using Chainguard Containers for your specific organization.