FEATURED REPORT
Snyk Named a Leader in the 2025 Forrester SAST Wave: SAST Solutions, Q3 2025
We’re excited to announce that Snyk has been recognized as a Leader in the Forrester Wave™: Static Application Security Testing (SAST) Solutions, Q3 2025.
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
The Industry’s Fastest-Growing Secure Container Catalog
Our Chainguard Containers catalog now has more than 1,700 minimal, zero-CVE images, rebuilt from source every day – industry-leading in both breadth and depth.
1 MIN READ
arrow_forward
CYBERSECURITY
Why Prisma ORM Checks Types Faster Than Drizzle
Discover why Prisma ORM outperforms Drizzle ORM in TypeScript type checking. Our benchmarks show Prisma checks queries 72% faster on average, thanks to code generation that keeps editors snappy and CI runs smooth.
1 MIN READ
arrow_forward
CYBERSECURITY
npm Supply Chain Attack via Open Source maintainer compromise
On Monday, September 8th, a highly regarded open source developer, ~qix, was compromised via a phishing email.
1 MIN READ
arrow_forward
CYBERSECURITY
From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover
Exposed cloud credentials become the launchpad for mass phishing, highlighting email services as a prime target in cloud exploitation campaigns.
1 MIN READ
arrow_forward
CYBERSECURITY
What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security
Discover key insights from DevSecCon speaker Brett Smith on securing AI in your pipelines. Register for DevSecCon 2025 to enhance your AI security knowledge.
1 MIN READ
arrow_forward
CYBERSECURITY
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses using discrepancies in browser and serve
1 MIN READ
arrow_forward
CYBERSECURITY
s1ngularity's Aftermath: AI, TTPs, and Impact in the Nx Supply Chain Attack
A deeper look at the Nx supply chain attack: analyzing the performance of AI-powered malware, calculating incident impact, and sharing novel TTPs for further investigation.
1 MIN READ
arrow_forward
CYBERSECURITY
Expanding Chainguard VMs: Zero-CVE Application & Base Virtual Machine Images for Cloud and On-Prem
Chainguard VMs is expanding with new Application and Base VM Images — giving teams a secure, zero-CVE foundation to build and innovate faster.
1 MIN READ
arrow_forward
CYBERSECURITY
Discover the Value of Chainguard Containers with the Value Calculator
Chainguard’s Value Calculator is a new tool we created to make it easy to quantify the value of using Chainguard Containers for your specific organization.
1 MIN READ
arrow_forward
CYBERSECURITY
s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know
Detect and mitigate a critical supply chain compromise affecting the Nx NPM Package. Organizations should act urgently.
1 MIN READ
arrow_forward
CYBERSECURITY
Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident
On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal.
1 MIN READ
arrow_forward