Cyber Security

Code to Cloud Attacks: From Github PAT to Cloud Control Plane

How attackers are leveraging compromised employee GitHub Personal Access Tokens to compromise cloud environments.

How Snyk Helps Federal Agencies Prepare for the Genesis Mission Era of AI-Driven Science

Snyk helps Federal Agencies secure software for the White House’s Genesis Mission, accelerating AI-driven science. Implement Secure by Design for the supply chain, cloud, and pipelines.

Meet Chainguard MCPs: Bringing supply chain security to the AI era

Chainguard now offers hardened, zero-CVE MCP container images, starting with mcp-grafana, with more on the way.

What’s new in December 2025: exploring new Chainguard product features

Explore all the latest features and releases for Chainguard Containers and Chainguard Libraries.

Top AWS re:Invent Announcements for Security Teams in 2025

The re:Invent announcements that are most impactful to security teams.

Architecting Security for Agentic Capabilities in Chrome

Nathan Parker from the Chrome security team outlines the advancements made in browser security due to the introduction of agentic capabilities in Chrome, particularly concerning the risks of indirect prompt injection. To address these threats, Google has developed a layered defense strategy that includes features like the User Alignment Critic, which reviews actions for user alignment and protects against goal-hijacking. Enhanced origin isolation limits the data agents can access, while user confirmations ensure control over critical actions. Continuous monitoring and collaboration with the security community are emphasized as essential to maintaining safety amid evolving challenges.

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

We break down the exploit mechanics and detail active in-the-wild attacks observed by our team, from credential harvesting to sophisticated cloud backdoors.

Making time: Space to think, build, and create (or, This Shit is Fun!)

See how we give engineers protected space for self-directed, high-impact work; boosting innovation and improving engineering morale.

En cybersécurité, l’expression « réduire sa surface d’attaque » est répétée si souvent qu’elle risque de perdre son sens.

This Shit is Hard: Keeping Chainguard OS lean, current, and secure — the power of garbage collection

Learn how we keep Chainguard OS and Wolfi lean and secure with automated package garbage collection that cuts attack surface while preserving reproducibility.

Anchore Enterprise now validates Chainguard Libraries: prevent 98% of Python malware and eliminate high-severity CVE toil

Customers can now leverage Anchore Enterprise’s scanning capabilities for Chainguard Libraries for Python.