Chainguard Blog
Latest updates
- security
Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads
Quincy Castro, CISO
- security
CMMC Phase 2, explained: Requirements, deadlines, and who’s affected
Philip Brooks, Senior Enterprise Solutions Engineer
- security
Mythos pulls zero-days forward. Here's what you need to know now.
Patrick Smyth, Principal Developer Relations Engineer
- security
Chainguard customers safe from elementary-data compromise
Quincy Castro, CISO
- security
Chainguard customers safe from new npm worm and xinference supply chain attack
Quincy Castro, CISO
- security
2026: The year of AI-assisted attacks
Patrick Smyth, Principal Developer Relations Engineer
- security
AI is finding vulnerabilities faster than anyone can patch them. Now what?
Ed Sawma, VP of Product Marketing
- security
Is Grype a single point of failure for Chainguard’s CVE detection?
Alex Burrage, Director of Product Security
- security
Attacks rewritten: Where malware enters the build
Manfred Moser, Sr. Principal Developer Relations Engineer, and Patrick Smyth, Principal Developer Relations Engineer
- security
Your riskiest supplier isn't a vendor. It's a registry.
Cameron Martin, Manager, Solutions Engineering - APJ
- security
Malicious axios versions published to npm: Chainguard customers protected
Quincy Castro, CISO
- security
How to protect your organization from the telnyx PyPI compromise
Ross Gordon, Staff Product Marketing Manager, and Bria Giordano, Director, Product Management