4276 articles
4276 ARTICLES
A new phishing campaign weaponizes NPM and the unpkg CDN. Over 175 throwaway packages are used to host scripts that redirect users to credential-harvesting sites. The attack targets enterprise employees through the browser, not developers at install time.
Chainguard surveyed 1,200 engineers and technology leaders to better understand the state of the developer experience today and where teams can improve.
Prisma ORM v6.17.0 is out with fixes and improvements. Connecting to Prisma Postgres via your favorite ORM/DB tool is now GA. Read the full update.
Turning attacker insights into stronger cloud security protections.
Wiz Research discovers vulnerability stemming from 13-year-old bug present in all Redis versions, used in 75% of cloud environments.
How attackers exploit exposed databases for extortion—and the defenses that work.
Chainguard’s zero-CVE containers come with broad compatibility, custom assembly, verifiable provenance and SBOMs, and more to help you ship secure software.
Chainguard has created the first-ever CVE-free, vulnerability-free Raspberry Pi image. Learn more about how it works and what makes this special.
A practical guide to the risks, blind spots, and protections every security team needs to know.
In a recent analysis, Chainguard Libraries for JavaScript prevented over 99% of malicious npm packages published to the npm registry.
Wiz and the leading CSPs are launching one of the largest hacking competitions ever to secure the open-source software powering the cloud ecosystem
Chainguard SVP of Product Patrick Donahue shares why he is excited to join Chainguard and how he plans to help build products developers love.