corpus.blog
56,966 blogs · [ { "id": "01a0d898-029d-73fb-8b2f-2d77ec336782", "title": "Announcing Chainguard’s industry-first validated FIPS 140-3 module delivering post-quantum readiness", "url": "https://www.chainguard.dev/unchained/announcing-chainguards-industry-first-validated-fips-140-3-module-delivering-post-quantum-readiness", "published_at": "2026-09-24T00:00:00+00:00" }, { "id": "01a0d898-029d-73fb-8b2f-2d77ec4adba7", "title": "This Shit is Hard: Making FIPS boring, fast, and post-quantum", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-making-fips-boring-fast-and-post-quantum", "published_at": "2026-09-24T00:00:00+00:00" }, { "id": "01a0d898-029d-73fb-8b2f-2d77ed379344", "title": "This Shit is Hard: Getting commercial software into regulated environments using AI", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-getting-commercial-software-into-regulated-environments-using-ai", "published_at": "2026-09-22T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1677344ee9", "title": "Announcing the Sovereign Artifacts beta", "url": "https://www.chainguard.dev/unchained/announcing-the-sovereign-artifacts-beta", "published_at": "2026-09-15T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16780d0daf", "title": "The flood is coming and the pipes were already full", "url": "https://www.chainguard.dev/unchained/the-flood-is-coming-and-the-pipes-were-already-full", "published_at": "2026-09-15T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1678b37018", "title": "Athena spotlight: Black Duck on the importance of flagging zero-days at scale", "url": "https://www.chainguard.dev/unchained/athena-spotlight-black-duck-on-the-importance-of-flagging-zero-days-at-scale", "published_at": "2026-09-14T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16791a486f", "title": "This Shit is Hard: Factory-scale toolchain management", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-factory-scale-toolchain-management", "published_at": "2026-09-09T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167953a2bf", "title": "How financial services companies can modernize their software supply chain", "url": "https://www.chainguard.dev/unchained/how-financial-services-companies-can-modernize-their-software-supply-chain", "published_at": "2026-09-04T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1679c5d8a8", "title": "What it took to reach 1 billion build manifests", "url": "https://www.chainguard.dev/unchained/what-it-took-to-reach-1-billion-build-manifests", "published_at": "2026-09-03T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167a16cd4f", "title": "This Shit is Hard: Taming the Thundering Herd", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-taming-the-thundering-herd", "published_at": "2026-09-02T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167a8444bf", "title": "Announcing Chainguard container images for Go 1.27", "url": "https://www.chainguard.dev/unchained/announcing-chainguard-container-images-for-go-1-27", "published_at": "2026-08-31T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167b38b385", "title": "This Shit is Hard: Getting AI to prove where a number came from", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-getting-ai-to-prove-where-a-number-came-from", "published_at": "2026-08-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167ba02c26", "title": "This Shit is Hard: Patching a vulnerability that has no fix", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-patching-a-vulnerability-that-has-no-fix", "published_at": "2026-08-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167c7303f8", "title": "Proven, not promised: Chainguard Containers achieves SLSA Build Level 3", "url": "https://www.chainguard.dev/unchained/proven-not-promised-chainguard-containers-achieves-slsa-build-level-3", "published_at": "2026-08-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167d547217", "title": "Introducing the Guardener GitHub App", "url": "https://www.chainguard.dev/unchained/introducing-the-guardener-github-app", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167e12815d", "title": "Chainguard Libraries now available on AWS Security Hub Extended", "url": "https://www.chainguard.dev/unchained/chainguard-libraries-now-available-on-aws-security-hub-extended", "published_at": "2026-08-04T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167ec7a9ef", "title": "The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign", "url": "https://www.chainguard.dev/unchained/the-keyv-and-cacheable-npm-supply-chain-attack-inside-the-mini-shai-hulud-campaign", "published_at": "2026-08-04T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167f67a633", "title": "Why AI-assisted attacks made software supply chain security its own category", "url": "https://www.chainguard.dev/unchained/why-ai-assisted-attacks-made-software-supply-chain-security-its-own-category", "published_at": "2026-08-03T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167fa978db", "title": "This Shit is Hard: How Chainguard is sandboxing Athena", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-how-chainguard-is-sandboxing-athena", "published_at": "2026-07-29T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e167fd5c66c", "title": "Why zero CVEs matters in mobile airgapped deployments", "url": "https://www.chainguard.dev/unchained/why-zero-cves-matters-in-mobile-airgapped-deployments", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168052b15f", "title": "Mitigating WordPress attacks with containers", "url": "https://www.chainguard.dev/unchained/mitigating-wordpress-attacks-with-containers", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16812cdf60", "title": "Growing up the hard way", "url": "https://www.chainguard.dev/unchained/growing-up-the-hard-way", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168152b1ed", "title": "Booz Allen Hamilton signs enterprise license agreement with Chainguard", "url": "https://www.chainguard.dev/unchained/booz-allen-hamilton-signs-enterprise-license-agreement-with-chainguard", "published_at": "2026-07-21T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168238f50c", "title": "Follow the money", "url": "https://www.chainguard.dev/unchained/follow-the-money", "published_at": "2026-07-15T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1682f8a1b2", "title": "Responding to the Five Eyes guidance on AI and cyber risk", "url": "https://www.chainguard.dev/unchained/responding-to-the-five-eyes-guidance-on-ai-and-cyber-risk", "published_at": "2026-07-15T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1683e90ce0", "title": "AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions \"pwn request\" (July 2026)", "url": "https://www.chainguard.dev/unchained/asyncapi-supply-chain-compromise-npm-packages-backdoored-via-github-actions", "published_at": "2026-07-14T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1684e124b3", "title": "Expanding Athena", "url": "https://www.chainguard.dev/unchained/expanding-athena", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16850b4ae3", "title": "We're putting our security to the test, and we want your help", "url": "https://www.chainguard.dev/unchained/we-are-putting-our-security-to-the-test-and-we-want-your-help", "published_at": "2026-07-06T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1685c0fc9b", "title": "Summer of Clearinghouses", "url": "https://www.chainguard.dev/unchained/summer-of-clearinghouses", "published_at": "2026-07-05T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168676e0a1", "title": "You can't trust what you can't see: How we keep an eye on a fleet of AI agents", "url": "https://www.chainguard.dev/unchained/you-cant-trust-what-you-cant-see-how-we-keep-an-eye-on-a-fleet-of-ai-agents", "published_at": "2026-07-02T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1686c4a4bd", "title": "This Shit is Hard: Getting software to run on robots (and then getting the robots to work)", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-getting-software-to-run-on-robots", "published_at": "2026-07-01T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16870a6265", "title": "The State of Trusted Open Source: June 2026", "url": "https://www.chainguard.dev/unchained/the-state-of-trusted-open-source-june-2026", "published_at": "2026-06-30T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1687eebf37", "title": "Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GA", "url": "https://www.chainguard.dev/unchained/chainguard-repository-adds-new-policies-chainguard-libraries-for-javascript-is-ga", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1688eb20c6", "title": "Everything we announced during AI Readiness Innovation Week", "url": "https://www.chainguard.dev/unchained/everything-we-announced-during-ai-readiness-innovation-week", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1689b17a3a", "title": "Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java", "url": "https://www.chainguard.dev/unchained/wiz-now-scans-chainguard-libraries-for-python-and-java", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168a15cc26", "title": "Securing the AI coding ecosystem: Chainguard and the AI tools developers use", "url": "https://www.chainguard.dev/unchained/securing-the-ai-coding-ecosystem-chainguard-and-the-ai-tools-developers-use", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168ac3f224", "title": "This Shit is Hard: How AI keeps our code on standard", "url": "https://www.chainguard.dev/unchained/this-shit-is-hard-how-ai-keeps-our-code-on-standard", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168b0c2e75", "title": "Secure your pipelines with Chainguard Actions, now available in Open Beta", "url": "https://www.chainguard.dev/unchained/secure-your-pipelines-with-chainguard-actions-now-available-in-open-beta", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168b945033", "title": "Chainguard plug-in now available on Cursor Marketplace", "url": "https://www.chainguard.dev/unchained/chainguard-plug-in-now-available-on-cursor-marketplace", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168bb9f715", "title": "Adopt hardened containers without changing your pipelines, tooling, or environment", "url": "https://www.chainguard.dev/unchained/adopt-hardened-containers-without-changing-your-pipelines-tooling-or-environment", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168c5af5f8", "title": "Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up", "url": "https://www.chainguard.dev/unchained/chainguard-libraries-for-java-is-now-ga-and-includes-cve-remediation", "published_at": "2026-06-23T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168cfa1422", "title": "The Maintainer of Last Resort", "url": "https://www.chainguard.dev/unchained/the-maintainer-of-last-resort", "published_at": "2026-06-22T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168de32872", "title": "Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security", "url": "https://www.chainguard.dev/unchained/building-a-category-chainguard-named-a-leader-in-the-inaugural-gartner-magic-quadrant-for-software-supply-chain-security", "published_at": "2026-06-22T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168e5d9128", "title": "Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security", "url": "https://www.chainguard.dev/unchained/chainguard-is-named-a-leader-in-the-2026-gartner-magic-quadrant-for-software-supply-chain-security", "published_at": "2026-06-18T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168ea05bdd", "title": "Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run", "url": "https://www.chainguard.dev/unchained/introducing-the-chainguard-cinc-auditor-image-stig-scanning-for-chainguard-containers-ready-to-run", "published_at": "2026-06-18T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168ecc205f", "title": "Chainguard Agent Skills is now open to everyone, with a private registry to manage your internal skills", "url": "https://www.chainguard.dev/unchained/chainguard-agent-skills-is-now-open-to-everyone-with-a-private-registry-to-manage-your-internal-skills", "published_at": "2026-06-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168f27e46b", "title": "@mastra npm scope takeover: 143 packages backdoored via compromised contributor account", "url": "https://www.chainguard.dev/unchained/mastra-npm-scope-takeover-143-packages-backdoored-via-compromised-contributor-account", "published_at": "2026-06-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e168fdc85d9", "title": "Faster than the advisory", "url": "https://www.chainguard.dev/unchained/faster-than-the-advisory", "published_at": "2026-06-10T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1690c0f088", "title": "The expanding threat landscape: Chainguard now scans source code for traditional malware and “greyware”", "url": "https://www.chainguard.dev/unchained/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware", "published_at": "2026-06-09T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16913118da", "title": "Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp", "url": "https://www.chainguard.dev/unchained/chainguard-artifacts-safe-from-miasma-phantom-gyp-npm-attack", "published_at": "2026-06-05T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16915f6256", "title": "Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads", "url": "https://www.chainguard.dev/unchained/chainguard-customers-safe-from-mini-shai-hulud-worm-targeting-redhat-cloud-services-npm-packages", "published_at": "2026-06-01T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1692011bfb", "title": "The hardest fork", "url": "https://www.chainguard.dev/unchained/the-hardest-fork", "published_at": "2026-05-28T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1692b7bfb9", "title": "5 security myths that Mythos ended (as told by a CISO)", "url": "https://www.chainguard.dev/unchained/5-security-myths-that-mythos-ended-as-told-by-a-ciso", "published_at": "2026-05-27T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169368f382", "title": "Chainguard and Upwind: Secure what you build. Verify what you run.", "url": "https://www.chainguard.dev/unchained/chainguard-and-upwind-secure-what-you-build-verify-what-you-run", "published_at": "2026-05-26T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16944c9c97", "title": "Preparing for Mythos: Practical advice for engineering teams", "url": "https://www.chainguard.dev/unchained/preparing-for-mythos-practical-advice-for-engineering-teams", "published_at": "2026-05-26T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1694fbfa11", "title": "Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)", "url": "https://www.chainguard.dev/unchained/mini-shai-hulud-npm-attack-antv-ecosystem-compromise-may-2026", "published_at": "2026-05-19T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1695aa94af", "title": "Building for the AI era: Chainguard partners with Endor Labs", "url": "https://www.chainguard.dev/unchained/building-for-the-ai-era-chainguard-partners-with-endor-labs", "published_at": "2026-05-19T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1696375eaa", "title": "Node-ipc compromised: Credential stealer targets package with 500k+ weekly downloads", "url": "https://www.chainguard.dev/unchained/node-ipc-compromised-credential-stealer-targets-package-with-500k-weekly-downloads", "published_at": "2026-05-14T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16969ba3ae", "title": "Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.", "url": "https://www.chainguard.dev/unchained/canadas-cpcsc-and-bill-c-8-are-coming-heres-what-you-need-to-do", "published_at": "2026-05-14T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1696da55bc", "title": "Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do", "url": "https://www.chainguard.dev/unchained/luck-isnt-a-security-control-what-happened-with-mini-shai-hulud-and-what-you-need-to-do", "published_at": "2026-05-13T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1696ea5601", "title": "Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS", "url": "https://www.chainguard.dev/unchained/chainguard-brings-first-party-rhel-9-and-rhel-10-rpm-support-to-chainguard-os-joins-finos", "published_at": "2026-05-11T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1697dcd293", "title": "Cyber resiliency in practice: Lessons from recent supply chain attacks", "url": "https://www.chainguard.dev/unchained/cyber-resiliency-in-practice-lessons-from-recent-supply-chain-attacks", "published_at": "2026-05-08T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1698c24461", "title": "Building the business case for a secure open source supply chain", "url": "https://www.chainguard.dev/unchained/building-the-business-case-for-a-secure-open-source-supply-chain", "published_at": "2026-05-05T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1698ef3159", "title": "How we automatically test the world's most secure Linux distribution", "url": "https://www.chainguard.dev/unchained/how-we-automatically-test-the-worlds-most-secure-linux-distribution", "published_at": "2026-05-01T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e1699eca9c7", "title": "How does Chainguard prevent malware in Chainguard Libraries?", "url": "https://www.chainguard.dev/unchained/how-does-chainguard-prevent-malware-in-chainguard-libraries", "published_at": "2026-05-01T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169a11d69c", "title": "Chainguard EKS add-ons are now available in the AWS Marketplace", "url": "https://www.chainguard.dev/unchained/chainguard-eks-add-ons-are-now-available-in-the-aws-marketplace", "published_at": "2026-04-30T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169ac343d2", "title": "Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads", "url": "https://www.chainguard.dev/unchained/chainguard-artifacts-safe-from-npm-supply-chain-attack-targeting-sap-developer-dependencies", "published_at": "2026-04-29T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169b6a6d6d", "title": "CMMC Phase 2, explained: Requirements, deadlines, and who’s affected", "url": "https://www.chainguard.dev/unchained/cmmc-phase-2-explained", "published_at": "2026-04-29T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169b71070f", "title": "Going beyond CVEs: Chainguard’s one day KEV SLA", "url": "https://www.chainguard.dev/unchained/going-beyond-cves-chainguards-one-day-kev-sla", "published_at": "2026-04-28T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169c222ab4", "title": "Mythos pulls zero-days forward. Here's what you need to know now.", "url": "https://www.chainguard.dev/unchained/mythos-pulls-zero-days-forward-heres-what-you-need-to-know-now", "published_at": "2026-04-27T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169cd438a5", "title": "Chainguard customers safe from elementary-data compromise", "url": "https://www.chainguard.dev/unchained/chainguard-customers-safe-from-elementary-data-compromise", "published_at": "2026-04-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169d066bfd", "title": "Chainguard customers safe from new npm worm and xinference supply chain attack", "url": "https://www.chainguard.dev/unchained/chainguard-customers-safe-from-new-npm-worm-and-xinference-supply-chain-attack", "published_at": "2026-04-22T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169d9c30eb", "title": "Chainguard and Cursor partner to bring secure open source artifacts to agentic coding", "url": "https://www.chainguard.dev/unchained/chainguard-and-cursor-partner-to-bring-secure-open-source-artifacts-to-agentic-coding", "published_at": "2026-04-21T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169dba013e", "title": "Securing the next Moon Age: Automated compliance powers the next giant leap", "url": "https://www.chainguard.dev/unchained/securing-the-next-moon-age-automated-compliance-powers-the-next-giant-leap", "published_at": "2026-04-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169e4346cb", "title": "Managing third-party images at scale", "url": "https://www.chainguard.dev/unchained/managing-third-party-images-at-scale", "published_at": "2026-04-16T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169e7758da", "title": "Docker Hodgepodge Images", "url": "https://www.chainguard.dev/unchained/docker-hodgepodge-images", "published_at": "2026-04-15T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e169f43d037", "title": "2026: The year of AI-assisted attacks", "url": "https://www.chainguard.dev/unchained/2026-the-year-of-ai-assisted-attacks", "published_at": "2026-04-14T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a00ebd23", "title": "Is Grype a single point of failure for Chainguard’s CVE detection?", "url": "https://www.chainguard.dev/unchained/is-grype-a-single-point-of-failure-for-chainguards-cve-detection", "published_at": "2026-04-10T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a03eb9dd", "title": "AI is finding vulnerabilities faster than anyone can patch them. Now what?", "url": "https://www.chainguard.dev/unchained/ai-is-finding-vulnerabilities-faster-than-anyone-can-patch-them-now-what", "published_at": "2026-04-10T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a0c43a40", "title": "Chainguard Libraries is now free until June 30, 2026 — no commitment required", "url": "https://www.chainguard.dev/unchained/chainguard-libraries-is-now-free-until-june-30-2026-no-commitment-required", "published_at": "2026-04-09T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a180d497", "title": "SecDB is the past, OSV is the future", "url": "https://www.chainguard.dev/unchained/secdb-is-the-past-osv-is-the-future", "published_at": "2026-04-09T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a2416674", "title": "Open source died in March. It just doesn't know it yet.", "url": "https://www.chainguard.dev/unchained/open-source-died-in-march-it-just-doesnt-know-it-yet", "published_at": "2026-04-09T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a2d7fed2", "title": "Ship and patch doesn't cut it in the AI era", "url": "https://www.chainguard.dev/unchained/ship-and-patch-doesnt-cut-it-in-the-ai-era", "published_at": "2026-04-08T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a367f16b", "title": "Attacks rewritten: Where malware enters the build", "url": "https://www.chainguard.dev/unchained/attacks-rewritten-where-malware-enters-the-build", "published_at": "2026-04-07T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a3d02fb9", "title": "Removing supply chain friction: How PeopleTec improved developer productivity with Chainguard", "url": "https://www.chainguard.dev/unchained/removing-supply-chain-friction-how-peopletec-improved-developer-productivity-with-chainguard", "published_at": "2026-04-02T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a43bd1d8", "title": "Your riskiest supplier isn't a vendor. It's a registry.", "url": "https://www.chainguard.dev/unchained/your-riskiest-supplier-isnt-a-vendor-its-a-registry", "published_at": "2026-04-02T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a51e0676", "title": "Malicious axios versions published to npm: Chainguard customers protected", "url": "https://www.chainguard.dev/unchained/malicious-axios-versions-published-to-npm-chainguard-customers-protected", "published_at": "2026-03-31T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a569fe7f", "title": "The State of Trusted Open Source: March 2026", "url": "https://www.chainguard.dev/unchained/the-state-of-trusted-open-source-march-2026", "published_at": "2026-03-31T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a6038143", "title": "How to protect your organization from the telnyx PyPI compromise", "url": "https://www.chainguard.dev/unchained/how-to-protect-your-organization-from-the-telnyx-pypi-compromise", "published_at": "2026-03-27T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a6707172", "title": "Introducing the Activity Center: One place for every change that matters", "url": "https://www.chainguard.dev/unchained/introducing-the-activity-center", "published_at": "2026-03-25T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a7598588", "title": "You were one pip install away from the litellm breach. Chainguard customers weren’t.", "url": "https://www.chainguard.dev/unchained/you-were-one-pip-install-away-from-a-breach-chainguard-customers-werent", "published_at": "2026-03-24T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a7be6b1b", "title": "Secure-by-default: Chainguard customers unaffected by the Trivy supply chain attack", "url": "https://www.chainguard.dev/unchained/chainguard-customers-unaffected-by-the-trivy-supply-chain-attack", "published_at": "2026-03-20T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a88678db", "title": "Breaking the release monolith: How OutSystems platform engineering restored trust in delivery", "url": "https://www.chainguard.dev/unchained/breaking-the-release-monolith-how-outsystems-platform-engineering-restored-trust-in-delivery", "published_at": "2026-03-19T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a8dfd7ac", "title": "Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-commercial-builds", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a9208bd5", "title": "Everything we announced at Chainguard Assemble 2026", "url": "https://www.chainguard.dev/unchained/everything-we-announced-at-chainguard-assemble-2026", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16a99aaaf3", "title": "Introducing Chainguard Actions: CI/CD workflows you can trust", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-actions", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16aa2dc0d2", "title": "Introducing Chainguard Agent Skills: Because your AI agent shouldn't trust strangers", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-agent-skills", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16ab22a9cd", "title": "Meet Guardener: The intelligent migration expert for everyone", "url": "https://www.chainguard.dev/unchained/meet-the-guardener", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16ab9b0ad4", "title": "Introducing Chainguard Catalog Starter: Your choice of five free trusted container images from the best catalog", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-catalog-starter", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0b5ca-2147-710a-9d34-4e16ac22352e", "title": "Introducing Chainguard OS Packages: Secure ingredients for custom container builds", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-os-packages", "published_at": "2026-03-17T00:00:00+00:00" } ] posts Claim your blog
Back to Chainguard Blog
Blog · corpus.blog/blogs/chainguard.dev/posts

Chainguard Blog

chainguard.dev

2026

Announcing Chainguard’s industry-first validated FIPS 140-3 module delivering post-quantum readinessoriginal ↗
24 Sept 2026
This Shit is Hard: Making FIPS boring, fast, and post-quantumoriginal ↗
24 Sept 2026
This Shit is Hard: Getting commercial software into regulated environments using AIoriginal ↗
22 Sept 2026
Announcing the Sovereign Artifacts betaoriginal ↗
15 Sept 2026
The flood is coming and the pipes were already fulloriginal ↗
15 Sept 2026
Athena spotlight: Black Duck on the importance of flagging zero-days at scaleoriginal ↗
14 Sept 2026
This Shit is Hard: Factory-scale toolchain managementoriginal ↗
9 Sept 2026
How financial services companies can modernize their software supply chainoriginal ↗
4 Sept 2026
What it took to reach 1 billion build manifestsoriginal ↗
3 Sept 2026
This Shit is Hard: Taming the Thundering Herdoriginal ↗
2 Sept 2026
Announcing Chainguard container images for Go 1.27original ↗
31 Aug 2026
This Shit is Hard: Getting AI to prove where a number came fromoriginal ↗
25 Aug 2026
This Shit is Hard: Patching a vulnerability that has no fixoriginal ↗
17 Aug 2026
Proven, not promised: Chainguard Containers achieves SLSA Build Level 3original ↗
17 Aug 2026
Introducing the Guardener GitHub Apporiginal ↗
12 Aug 2026
Chainguard Libraries now available on AWS Security Hub Extendedoriginal ↗
4 Aug 2026
The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaignoriginal ↗
4 Aug 2026
Why AI-assisted attacks made software supply chain security its own categoryoriginal ↗
3 Aug 2026
This Shit is Hard: How Chainguard is sandboxing Athenaoriginal ↗
29 Jul 2026
Why zero CVEs matters in mobile airgapped deploymentsoriginal ↗
28 Jul 2026
Mitigating WordPress attacks with containersoriginal ↗
27 Jul 2026
Growing up the hard wayoriginal ↗
22 Jul 2026
Booz Allen Hamilton signs enterprise license agreement with Chainguardoriginal ↗
21 Jul 2026
Follow the moneyoriginal ↗
15 Jul 2026
Responding to the Five Eyes guidance on AI and cyber riskoriginal ↗
15 Jul 2026
AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026)original ↗
14 Jul 2026
Expanding Athenaoriginal ↗
7 Jul 2026
We're putting our security to the test, and we want your helporiginal ↗
6 Jul 2026
Summer of Clearinghousesoriginal ↗
5 Jul 2026
You can't trust what you can't see: How we keep an eye on a fleet of AI agentsoriginal ↗
2 Jul 2026
This Shit is Hard: Getting software to run on robots (and then getting the robots to work)original ↗
1 Jul 2026
The State of Trusted Open Source: June 2026original ↗
30 Jun 2026
Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GAoriginal ↗
25 Jun 2026
Everything we announced during AI Readiness Innovation Weekoriginal ↗
25 Jun 2026
Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Javaoriginal ↗
25 Jun 2026
Securing the AI coding ecosystem: Chainguard and the AI tools developers useoriginal ↗
24 Jun 2026
This Shit is Hard: How AI keeps our code on standardoriginal ↗
24 Jun 2026
Secure your pipelines with Chainguard Actions, now available in Open Betaoriginal ↗
24 Jun 2026
Chainguard plug-in now available on Cursor Marketplaceoriginal ↗
24 Jun 2026
Adopt hardened containers without changing your pipelines, tooling, or environmentoriginal ↗
24 Jun 2026
Chainguard Libraries for Java is now GA; CVE remediation beta available for sign uporiginal ↗
23 Jun 2026
The Maintainer of Last Resortoriginal ↗
22 Jun 2026
Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Securityoriginal ↗
22 Jun 2026
Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Securityoriginal ↗
18 Jun 2026
Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to runoriginal ↗
18 Jun 2026
Chainguard Agent Skills is now open to everyone, with a private registry to manage your internal skillsoriginal ↗
17 Jun 2026
@mastra npm scope takeover: 143 packages backdoored via compromised contributor accountoriginal ↗
17 Jun 2026
Faster than the advisoryoriginal ↗
10 Jun 2026
The expanding threat landscape: Chainguard now scans source code for traditional malware and “greyware”original ↗
9 Jun 2026
Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyporiginal ↗
5 Jun 2026
Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloadsoriginal ↗
1 Jun 2026
The hardest forkoriginal ↗
28 May 2026
5 security myths that Mythos ended (as told by a CISO)original ↗
27 May 2026
Chainguard and Upwind: Secure what you build. Verify what you run.original ↗
26 May 2026
Preparing for Mythos: Practical advice for engineering teamsoriginal ↗
26 May 2026
Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)original ↗
19 May 2026
Building for the AI era: Chainguard partners with Endor Labsoriginal ↗
19 May 2026
Node-ipc compromised: Credential stealer targets package with 500k+ weekly downloadsoriginal ↗
14 May 2026
Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.original ↗
14 May 2026
Luck isn't a security control: What happened with mini Shai-Hulud and what you need to dooriginal ↗
13 May 2026
Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOSoriginal ↗
11 May 2026
Cyber resiliency in practice: Lessons from recent supply chain attacksoriginal ↗
8 May 2026
Building the business case for a secure open source supply chainoriginal ↗
5 May 2026
How we automatically test the world's most secure Linux distributionoriginal ↗
1 May 2026
How does Chainguard prevent malware in Chainguard Libraries?original ↗
1 May 2026
Chainguard EKS add-ons are now available in the AWS Marketplaceoriginal ↗
30 Apr 2026
Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloadsoriginal ↗
29 Apr 2026
CMMC Phase 2, explained: Requirements, deadlines, and who’s affectedoriginal ↗
29 Apr 2026
Going beyond CVEs: Chainguard’s one day KEV SLAoriginal ↗
28 Apr 2026
Mythos pulls zero-days forward. Here's what you need to know now.original ↗
27 Apr 2026
Chainguard customers safe from elementary-data compromiseoriginal ↗
25 Apr 2026
Chainguard customers safe from new npm worm and xinference supply chain attackoriginal ↗
22 Apr 2026
Chainguard and Cursor partner to bring secure open source artifacts to agentic codingoriginal ↗
21 Apr 2026
Securing the next Moon Age: Automated compliance powers the next giant leaporiginal ↗
17 Apr 2026
Managing third-party images at scaleoriginal ↗
16 Apr 2026
Docker Hodgepodge Imagesoriginal ↗
15 Apr 2026
2026: The year of AI-assisted attacksoriginal ↗
14 Apr 2026
Is Grype a single point of failure for Chainguard’s CVE detection?original ↗
10 Apr 2026
AI is finding vulnerabilities faster than anyone can patch them. Now what?original ↗
10 Apr 2026
Chainguard Libraries is now free until June 30, 2026 — no commitment requiredoriginal ↗
9 Apr 2026
SecDB is the past, OSV is the futureoriginal ↗
9 Apr 2026
Open source died in March. It just doesn't know it yet.original ↗
9 Apr 2026
Ship and patch doesn't cut it in the AI eraoriginal ↗
8 Apr 2026
Attacks rewritten: Where malware enters the buildoriginal ↗
7 Apr 2026
Removing supply chain friction: How PeopleTec improved developer productivity with Chainguardoriginal ↗
2 Apr 2026
Your riskiest supplier isn't a vendor. It's a registry.original ↗
2 Apr 2026
Malicious axios versions published to npm: Chainguard customers protectedoriginal ↗
31 Mar 2026
The State of Trusted Open Source: March 2026original ↗
31 Mar 2026
How to protect your organization from the telnyx PyPI compromiseoriginal ↗
27 Mar 2026
Introducing the Activity Center: One place for every change that mattersoriginal ↗
25 Mar 2026
You were one pip install away from the litellm breach. Chainguard customers weren’t.original ↗
24 Mar 2026
Secure-by-default: Chainguard customers unaffected by the Trivy supply chain attackoriginal ↗
20 Mar 2026
Breaking the release monolith: How OutSystems platform engineering restored trust in deliveryoriginal ↗
19 Mar 2026
Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial softwareoriginal ↗
17 Mar 2026
Everything we announced at Chainguard Assemble 2026original ↗
17 Mar 2026
Introducing Chainguard Actions: CI/CD workflows you can trustoriginal ↗
17 Mar 2026
Introducing Chainguard Agent Skills: Because your AI agent shouldn't trust strangersoriginal ↗
17 Mar 2026
Meet Guardener: The intelligent migration expert for everyoneoriginal ↗
17 Mar 2026
Introducing Chainguard Catalog Starter: Your choice of five free trusted container images from the best catalogoriginal ↗
17 Mar 2026
Introducing Chainguard OS Packages: Secure ingredients for custom container buildsoriginal ↗
17 Mar 2026
Next