Chainguard Blog
RSS FeedFeatured stories
Everything we announced at Chainguard Assemble London 2026
Chainguard Assemble London 2026 introduces new tools for secure AI development, frontier vulnerability discovery, and trusted open source.
The AI Exploit Gap: How AI is changing security
Chainguard's AI Exploit Gap report reveals why security teams struggle to keep pace with AI-powered attacks and what organizations can do to close the gap.
Latest updates
engineeringFaster than the advisory
productThe expanding threat landscape: Chainguard now scans source code for traditional malware and “greyware”
securityMiasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp
securityChainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads
engineeringThe hardest fork
security5 security myths that Mythos ended (as told by a CISO)
newsChainguard and Upwind: Secure what you build. Verify what you run.
securityPreparing for Mythos: Practical advice for engineering teams
newsBuilding for the AI era: Chainguard partners with Endor Labs
securityMini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)
securityNode-ipc compromised: Credential stealer targets package with 500k+ weekly downloads
securityCanada's CPCSC and Bill C-8 are coming. Here's what you need to do.
