FEATURED REPORT
Hunting for signs of persistence in the cloud: an IR guide following the CircleCI incident
Learn how to detect malicious persistence techniques in AWS, GCP & Azure after potential initial compromise, like with the CircleCI incident
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
OSPO security evolution: The Kübler-Ross Model of open source
Open Source Program Offices (OPSO) are popping up all over, in recognition of the facts on the ground: open source software (and I would argue open standards as well) plays an enormous role in building and maintaining the software that increasingly drives the planet.
1 MIN READ
arrow_forward
CYBERSECURITY
Wiz launches Australia cloud data center further demonstrating commitment to ANZ and multinational organizations
Wiz announces availability of new regional data center and adds support for Essential Eight controls.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk transformed cloud security in 2022 with developer-first solution
Snyk IaC security takes a developer-first, application-centric approach to finding and fixing vulnerabilities in cloud infrastructure from the time infrastructure is defined in code, through to when resources are running in the cloud.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk's AppSec journey in 2022
Learn about key AppSec investments Snyk made in 2022 to improve performance, add new ecosystems, and support the enterprise.
1 MIN READ
arrow_forward
CYBERSECURITY
Open Policy Agent uses Chainguard Images to safeguard from OpenSSL vulnerabilities
Open Policy Agent (OPA) adopts Chainguard Images to secure systems from vulnerabilities. Others like Tailscale and Vietnam-based VPBank are also following suit.
1 MIN READ
arrow_forward
CYBERSECURITY
Building Wolfi from the ground up and announcing arm64 support!
Looking under the Wolfi hood. Chainguard Images now multi-platform with added 64-bit Arm (arm64) support and continues to expand set of available architectures.
1 MIN READ
arrow_forward
CYBERSECURITY
Bolstering Snyk's developer security platform in 2022
Now that it’s a new year, let’s take a look back at some of the amazing 2022 Snyk developer security platform highlights.
1 MIN READ
arrow_forward
CYBERSECURITY
New Year’s Resolutions: Where CISOs plan to invest and scale back in 2023
Hear from security leaders about their plans, strategies, and priorities for the new year.
1 MIN READ
arrow_forward
CYBERSECURITY
Supply chain security incident at CircleCI: Rotate your secrets
On January 4, CircleCI, an automated CI/CD pipeline setup tool, reported a security incident in their product by sharing an advisory.Learn about this incident, next steps, and about supply chain security.
1 MIN READ
arrow_forward
CYBERSECURITY
Benefits of keyless software signing
Keyless software signing uses ephemeral keys (not cryptographic) to sign and verify software. Get started using Chainguard Enforce Signing, powered by Sigstore.
1 MIN READ
arrow_forward
CYBERSECURITY
Lateral movement risks in the cloud and how to prevent them – Part 2: from compromised container to cloud takeover
In this second blog post, we will discuss lateral movement risks from Kubernetes to the cloud. We will explain attacker TTPs, and outline best practices for security practitioners and cloud builders to help secure their cloud environments and mitigate risk.
1 MIN READ
arrow_forward