Chainguard, the trusted source for open source, today announced Chainguard Libraries for Go and Chainguard Libraries for .NET, adding coverage for two new language ecosystems that allow engineering ...

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

Business teams are vibe coding prototypes faster than anyone in security can count them, and those prototypes are at their ...

An AI coding agent can write a useful fix and still create a security incident along the way. It may install a compromised ...

XBOW says its security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI ...

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - ...

Security researchers uncovered a weakness in npm Trusted Publishing that could let attackers publish malicious releases ...

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could ...

A slug flaw in npm Trusted Publishing exposed 1,500+ packages with 10m downloads. Bloom Security on what it means when AI ...

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...

SlugFest flaw in npm Trusted Publishing exposed 1,500+ packages to takeover via reclaimed GitHub names, risking millions of ...

A weakness in npm's trust model could let attackers publish updates to legitimate packages by claiming abandoned GitHub ...