Chainguard ⛓️ (@chainguard

Pinned

Three weeks ago, we announced Athena, the industry coalition to protect open source software from AI attacks. Here’s where Athena stands today: • 40,000+ vulnerabilities processed, doubled since launch • 42% are critical- or high-severity • 86% are network reachable, meaning

What happens to a vulnerability inside Athena? Here's how Athena's orchestrated defense works behind the scenes: 🔍 Find: A frontier model finds a memory-corruption bug in a widely-used parsing library three levels down in software that nobody thinks about until it breaks. It’s

00:00

"This is going to be a messy summer for everyone." Chainguard co-founder and CEO @lorenc_dan sat down with @TheRegister to share how AI is finding open source vulnerabilities faster than the industry can fix them (and how Athena plans to help):

It's looking like a hot, messy summer for security teams as AI finds countless previously hidden...

We think our stack is airtight… so we’re inviting you to try and prove us wrong. We’re teaming up with @Bugcrowd for a Live in the Loop bounty event. Live now through July 27 (or until the bounties run out) 👀 Oh, did we mention there’s $200k on the line?! Get involved here:

00:00

“They can’t scope work accurately, can’t set realistic expectations and can’t coach their teams on these tools. They’re leading a transformation they haven’t experienced themselves.” Chainguard CEO and cofounder @lorenc_dan was featured in @Bloomberg on why leaders need to model

AI Is Making Silicon Valley Productive, Anxious and Afraid to Log Off

Attackers don't need to be better than your defenses anymore... they just need to be faster 💨 And right now, they are. @lorenc_dan shares more on @MTSlive 👇

MTS

@MTSlive

Jul 1

SITUATION EXPLAINED: What does it mean that models have surpassed humans at finding exploits in open source code? We asked @lorenc_dan, co-founder and CEO of @chainguard_dev: "Models have surpassed the ability of humans to find exploits and to find vulnerabilities in code.

00:00

Overheard on @lightspeedvp's Lightwork podcast 👂 Join Athena: chainguard.dev/athena

00:00

Between March 1 and May 31, we examined 2,400 unique container image projects, 18,016 total vulnerability instances, and 886 unique CVEs. Here's what we learned: 1️⃣ High-severity vulnerabilities accounted for 63.1% of all observed instances (a 13% increase quarter-over-quarter)

🪚 "AI showed up and gave everyone a circular saw. It's way faster, but also a lot easier to lose a finger. Today, everyone is figuring out what guardrails to put in place to do this safely.” @lorenc_dan talked to @BusinessInsider about the double-edged sword of AI-generated

Business Insider surveyed dozens of startup founders to understand how coding has changed with AI.

From businessinsider.com

As if you needed another reason to choose Chainguard… here are five:

117

Chainguard ⛓️ reposted

The Linux Foundation

@linuxfoundation

Jun 25

The age of AI requires a new solution to cybersecurity challenges. Today, the Linux Foundation and industry leaders launched Akrites, a coordinated effort to defend critical open source software against AI-enabled cyber threats. Frontier AI can find software vulnerabilities in

38K

Chainguard ⛓️ reposted

Clint Gibler

@clintgibler

Jun 25

Supply Chain security is changing fast, and frontier models are accelerating that change in a way most teams aren't prepared for yet. Chainguard just dropped the event lineup for their first-ever "Innovation Week: AI Readiness" and some caught my eye: TODAY! Tuesday June 23:

Chainguard 🤝 @wiz_io Customers can now use Wiz to scan Chainguard Libraries for Python and Java. That means: ✨ Less CVE noise ✨ Malware gets blocked before it reaches your environment ✨ Verifiable proof your pinned dependencies are safe Learn more: chainguard.dev/unchained/wiz-…

376

Chainguard ⛓️ reposted

Arsh Goyal

@arsh_goyal

Jun 25

Sat down with @lorenc_dan , CEO and co-founder of @chainguard_dev, and this one got real. We got into Fable 5 getting banned by the US government and what that actually means for people building with it. He broke down the agent they just shipped, why they built it the way they

00:00

3.2K