The trusted source for open source (& memes).
Joined July 2021
- Tweets4.8K
- Following116
- Followers6.7K
- Likes12.6K
Pinned Tweet
Today, we're starting Athena's disclosure program. The first release is 14 vulnerabilities that were quietly fixed in open source projects but never got a CVE, so they never popped up on your scanners. Each now has an advisory on our public VEX feed, a free patch in our GitHub repo, and a remediated artifact available in Chainguard Repository.
Below, we show what these silent vulnerabilities can hide.
Read more about Athena's disclosure process: chainguard.dev/unchained/ath…
No Mythos access, no problem.
Chainguard Harness puts Claude Mythos 5.1 to work against a live build of your app inside an isolated microVM and hunts for the logic flaws, injection, and runtime bugs that static scanners miss.
Join the beta waitlist: chainguard.dev/products/harn…
SEE YOU AT KUBECON!
Stop by Booth #110 to learn how Chainguard helps teams secure their software supply chain, or book 15 minutes with our team so you’re guaranteed some time with us 1:1 👉 get.chainguard.dev/kubecon20…
brb hanging this one on the fridge
thanks for the recognition, @lightspeedvp, @FortuneMagazine, and @awscloud 💜
Your agents help you write the code. We help you:
✅ Ship it faster
✅ Run it securely
✅ Build it on a trusted foundation
Reid Tatoris and Sam Katzen walk through everything we launched at Assemble London 👇 chainguard.dev/unchained/eve…
Chainguard ⛓️ retweeted
Vulnpocalypse or vulnerability human centipede?
We’re all sewn in somewhere: labs finding, maintainers fixing, vendors packaging, operators deploying. Nobody likes their spot. Last week showed everyone downstream what’s coming.
chainguard.dev/unchained/reb…
Chainguard ⛓️ retweeted
Securing open-source software for the enterprise is a challenge @chainguard_dev is working to address. At Morgan Stanley’s Tech Week, Dan Lorenc discusses how engaging with organizations at scale can help strengthen software supply chains and meet business needs.
The collab you didn’t know you needed: Chainguard x @ScienceBob
We’re teaming up with Science Bob for Family STEM Days in New York and San Francisco, and you and yours are invited! We'll have live experiments, activity stations, and a Q&A where your kids (or you!) can ask Bob anything.
🌁 SF: Sunday, November 15
🗽 NYC: Sunday, December 6
Links in the thread 👇
🌁 San Francisco: familystemdaywithchainguarda…
🗽 New York: familystemdaynyc.splashthat.…
Chainguard ⛓️ retweeted
Four @MantisVC portfolio companies. All three stages of the 2027 @FortuneMagazine Cyber 60.
Early-stage
• @keycardai - Identity & runtime auth for AI agents
• @scanner_dev - Petabyte-scale log search & threat investigation in seconds
Early-growth
• @outtake_ai - Agentic AI disrupting external threats & impersonation at scale
Growth
• @chainguard_dev - Secure-by-default, zero-CVE open source software
Huge congrats to the founders and teams, proud to be in your corner!
🤖 Made with AI
Chainguard ⛓️ retweeted
Very proud to see a handful of our cyber security portfolio companies make the @FortuneMagazine Cyber 60! Congrats to @outtake_ai @chainguard_dev @scanner_dev @KeycardAI 🌶️
We made the #FortuneCyber60 list! 🎉
Security challenges are only growing, and we're proud to be named among the startups facing them head-on.
For the full list from @FortuneMagazine and @lightspeedvp: fortune.com/ranking/cyber/20…
💥 The latest thing hitting your security team: burnout
We surveyed 1,300 security leaders on the impact of AI on security teams, and 64% said AI-accelerated cyberattacks contributed to their burnout over the last year.
More on how burnout weakens defenses and more in The AI Exploit Gap: chainguard.dev/unchained/the…
Chainguard ⛓️ retweeted
New First Pass with @lorenc_dan from @chainguard_dev on the ai vulnerability tsunami and why years of tech debt is coming due!
Next up on First Pass: A conversation with @lorenc_dan from @chainguard_dev
We had one of the worst weeks ever in new security vulnerabilities discovered. What does the PHP vulnerability mean, how can companies prepare, what should we expect in the future, etc
We dig in!
Chainguard ⛓️ retweeted
Next up on First Pass: A conversation with @lorenc_dan from @chainguard_dev
We had one of the worst weeks ever in new security vulnerabilities discovered. What does the PHP vulnerability mean, how can companies prepare, what should we expect in the future, etc
We dig in!
We 💜 our partners!
Earlier this month, we brought together our EMEA-based partners for an Inaugural Partner Day ahead of Assemble London. Thank you to everyone who joined us, and a huge congrats to Somerford Associates and Alan&Eve, who were recognized for their outstanding partnership and customer impact in the Enterprise and Commercial segments, respectively.
We couldn't do it without you!
LiteLLM 1.107.0 on PyPI and Docker Hub shipped a credential stealer that runs on every Python start. Chainguard customers pulling these artifacts from Chainguard are not exposed. chainguard.dev/unchained/lit…
Two critical PHP vulnerabilities (CVSS 9.2) were disclosed today, allowing unauthenticated RCE on default configurations.
To help everyone patch fast we are making images for PHP 8.2, 8.3, 8.4, and 8.5 free for anyone to use. You can access them here: images.chainguard.dev/direct…
Coordinated disclosure is hard, we appreciated everyone's help as we worked through this over the last several days.
