# cve management Published articles for cve management. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## NIS2: Understanding key software security requirements DevFeed: [NIS2: Understanding key software security requirements]() Original publisher: [Read original article]() Published: 2025-02-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability management](), [open-source-security](), [supply-chain-security](), [Cybersecurity](), [Critical Infrastructure](), [Development]() Tags: [compliance](), [cve-management](), [cve-reporting](), [energy](), [eu](), [europe](), [infrastructure](), [manufacturing](), [nis2](), [risk-management](), [sboms](), [secure-software](), [software-supply-chain](), [transportation](), [vulnerability-management]() ### AI overview This article explains how the European Union's NIS2 directive expands software security and vulnerability management requirements, shifts accountability to management and boards, and affects organizations operating in the EU. It discusses software supply chain security, open source development, SBOMs, CVE reporting, risk management, and the workload these requirements may create for security and developer teams. ### Source excerpt The European Union's Network and Information Systems 2 is a compliance framework with strict requirements around vulnerability management. ## Chainguard CVE Visualizations: Now Generally Available DevFeed: [Chainguard CVE Visualizations: Now Generally Available]() Original publisher: [Read original article]() Published: 2025-02-05T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [Security](), [data]() Tags: [announce](), [availability](), [chainguard](), [chainguard-console](), [chainguard-images](), [container-images](), [cve-data](), [cve-management](), [cve-visualizations](), [cves](), [release](), [reporting](), [vulnerabilities]() ### AI overview Chainguard announces the general availability of CVE Visualizations in the Chainguard Console. The feature helps users track remediated CVEs, compare CVE accumulation between Chainguard Images and open source alternatives, and evaluate the security and economic impact of minimal container images. ### Source excerpt Chainguard CVE Visualizations, now generally available, is a capability that allows users to compare CVE numbers in both Chainguard Containers and upstream. ## How much time is wasted triaging known exploits? DevFeed: [How much time is wasted triaging known exploits?]() Original publisher: [Read original article]() Published: 2024-06-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability management](), [Vulnerabilities](), [Exploit](), [chainguard images](), [container images](), [grype](), [chainguard]() Tags: [base-container-images](), [chainguard-images](), [container-image](), [container-images](), [cve](), [cve-management](), [cves](), [efficiency](), [exploited-vulnerabilities](), [exploits](), [grype](), [kev-catalog](), [known-exploited-vulnerability](), [nvd-cve](), [vulnerability](), [vulnerability-detection](), [vulnerability-management](), [zero-cves]() ### AI overview The article reports that seven percent of 230 popular Bitnami container images contained CVEs listed in the Known Exploited Vulnerability catalog, but detailed triage found that none were exploitable in those container contexts. It argues that CVE triage consumes substantial staff time, while Chainguard Images historically remediated affected CVEs in an average of 2.5 days. ### Source excerpt Stop wasting time on known exploits. Read our latest research and discover strategies to streamline your vulnerability management for maximum efficiency. ## Wolfi's approach to container security and CVE management DevFeed: [Wolfi's approach to container security and CVE management]() Original publisher: [Read original article]() Published: 2024-02-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [open-source-security](), [Security](), [Open Source]() Tags: [apko](), [container-security](), [cve](), [cve-management](), [melange](), [oci](), [secure-images](), [secure-software-supply-chain](), [security](), [software-supply-chain](), [wolfi]() ### AI overview The article explains how Wolfi, a secure-by-default undistro, supports container security by helping create minimal, reproducible OCI-compliant images and reducing software supply chain risks. It also describes how Wolfi powers Chainguard Images. ### Source excerpt Discover Wolfi, the 'secure-by-default' undistro for container security, enhancing open-source software with minimal CVE counts and robust protection. ## Why your company is wasting thousands of hours on software vulnerabilities DevFeed: [Why your company is wasting thousands of hours on software vulnerabilities]() Original publisher: [Read original article]() Published: 2024-02-06T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability management](), [Vulnerabilities](), [Containers](), [container images](), [chainguard images](), [chainguard labs]() Tags: [chainguard-images](), [chainguard-labs](), [common-vulnerabilities-and-exposures](), [container-images](), [containers](), [cve-management](), [security](), [vulnerabilities](), [vulnerability](), [vulnerability-management]() ### AI overview Chainguard Labs interviewed approximately ten software professionals and found that companies building or deploying containers may spend thousands of hours each year on vulnerability management. The article attributes much of this burden to large numbers of known vulnerabilities and image-selection practices that disregard vulnerability counts. ### Source excerpt Chainguard Labs surveyed nine companies to see how many hours they spent on vulnerability management each year. Check out this blog to see the results.