# Secure by design Published articles for Secure by design. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Why the CVE doom cycle cannot be solved by working harder DevFeed: [Why the CVE doom cycle cannot be solved by working harder]() Original publisher: [Read original article]() Author: Sam Barlien Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [vulnerability management](), [Automation](), [container-security](), [Vulnerabilities](), [configuration]() Tags: [automation](), [container-image-security](), [cve](), [false-positives](), [secure-by-design](), [security](), [vulnerability-management]() ### AI overview The article argues that the recurring cycle of scanning, triaging, patching, and redeploying container images cannot be solved by working harder or using faster scanners. Because vulnerability findings and CVEs accumulate faster than manual remediation can handle, it recommends embedding vulnerability management into the platform through secure-by-design practices, golden paths, and automation. ### Source excerpt Manual CVE triage doesn't scale. Break the CVE doom cycle by shifting vulnerability management into the platform with golden paths and automation ## How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate DevFeed: [How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate]() Original publisher: [Read original article]() Author: info@goteleport.com (Maximilian Heck, Waldemar Kindler) Published: 2026-07-16T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [cyber resilience act](), [Security](), [Architecture & Design](), [Authentication](), [Encryption](), [audit trail](), [Monitoring & Alerting]() Tags: [audit-trail](), [authentication](), [cra-requirements](), [cryptographic](), [cyber-resilience-act](), [eu](), [monitoring-alerting](), [secure-by-design](), [security]() ### AI overview The article explains how Teleport maps its infrastructure identity, access, policy, logging, monitoring, and audit controls to ENISA's Secure by Design and Default Playbook and the EU Cyber Resilience Act. It highlights cryptographic identity, least privilege, secure communication, supply-chain controls, and default protection of device identities and secrets. ### Source excerpt See how Teleport features map to ENISA's Secure-by-Design specification for CRA. ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing DevFeed: [Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing]() Original publisher: [Read original article]() Author: Edward Fernandez (noreply@blogger.com) Published: 2025-11-20T17:00:00Z Content type: release Language: en Sources: [Google Online Security]() Topics: [Android](), [cross-platform](), [Security & Privacy](), [interoperability](), [iOS](), [Google](), [Rust]() Tags: [android](), [android-security](), [cross-platform](), [google](), [interoperability](), [ios](), [none](), [rust](), [secure-by-design](), [security-privacy]() ### AI overview Google describes Quick Share interoperability with AirDrop, enabling two-way file sharing between Android and iOS devices starting with the Pixel 10 Family. The article explains the security measures used in the feature, including threat modeling, privacy reviews, penetration testing, and a Rust-based communication channel. ### Source excerpt Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That's why Android has been building experiences that help you stay connected across platforms. As part of our efforts to continue to make cross-platform communication more seamless for users, we've made Quick Share interoperable with AirDrop, allowing for two-way file sharing between Android and iOS devices, starting with the Pixel 10 Family. This new feature makes it possible to quickly share your photos, videos, and files with people you choose to communicate with, without worrying about the kind of phone they use. Most importantly, when you share personal files and content, you need to trust that it stays secure. You can share across devices with confidence knowing we built this feature with security at its core, protecting your data with strong safeguards that have been tested by independent security experts. Secure by Design We built Quick Share's interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products. Our approach to security is proactive and deeply integrated into every stage of the development process. This includes: Threat Modeling: We identify and address potential security risks before they can become a problem. Internal Security Design and Privacy Reviews: Our dedicated security and privacy teams thoroughly review the design to ensure it meets our high standards. Internal Penetration Testing: We conduct extensive in-house testing to identify and fix vulnerabilities. This Secure by Design philosophy ensures that all of our products are not just functional but also fundamentally secure. This feature is also protected by a multi-layered security approach to ensure a safe sharing experience from end-to-end, regardless of what platform you're on. Secure S ## Introducing New Updates to the Chainguard Images Directory DevFeed: [Introducing New Updates to the Chainguard Images Directory]() Original publisher: [Read original article]() Published: 2025-11-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [Containers](), [Kubernetes](), [Deployment](), [Open Source]() Tags: [bitnami-helm-charts](), [chainguard](), [chainguard-catalog](), [chainguard-console](), [chainguard-containers](), [chainguard-helm-charts](), [chainguard-images](), [chainguard-images-directory](), [compare](), [container-images](), [containers](), [cost](), [cve](), [demo](), [deployment](), [helm](), [helm-charts](), [kubernetes](), [oci](), [registry](), [secure-by-design](), [updates](), [zero-cve-containers]() ### AI overview Chainguard has updated its Images Directory with an embedded ROI calculator, Helm Charts for Kubernetes deployments, and refreshed data about the Chainguard Factory. The calculator compares CVE counts and remediation costs, while the Helm Charts provide drop-in replacements for popular open source applications using Chainguard Containers and OCI delivery. ### Source excerpt We've improved the Chainguard Images Directory with Helm charts for faster deployments, an ROI calculator, and more refreshed data to improve your experience. ## Secure by Design: The Future of Threat Modeling for AI-Native Applications DevFeed: [Secure by Design: The Future of Threat Modeling for AI-Native Applications]() Original publisher: [Read original article]() Author: John Carione Published: 2025-11-11T05:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Security for AI](), [Architecture & Design](), [Artificial Intelligence](), [snyk](), [Vulnerabilities](), [prompt injection]() Tags: [agentic](), [ai](), [prompt-injection](), [secure-by-design](), [security](), [security-for-ai](), [snyk]() ### AI overview This Snyk article argues that traditional, manual threat modeling cannot keep pace with AI-native applications built from large language models, autonomous agents, APIs, and changing data flows. It presents continuous, automated, AI-assisted threat modeling as a way to maintain secure-by-design systems and address risks such as prompt injection, data exfiltration, data poisoning, and agentic vulnerabilities. ### Source excerpt Explore how Snyk's Evo Threat Modeling Agent automates and contextualizes security for AI-native applications, addressing prompt injection, data exfiltration, data poisoning, and agentic vulnerabilities. ## Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk DevFeed: [Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk]() Original publisher: [Read original article]() Author: Phoebe Nerdahl Published: 2025-08-07T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [ai security](), [AI Strategy](), [AI Development](), [Security](), [Vulnerabilities](), [AI Platform](), [GitHub](), [Terraform]() Tags: [agentic-ai-security](), [ai](), [ai-adoption](), [ai-infrastructure](), [ai-security](), [awareness](), [blog](), [compliance](), [devops](), [executive](), [github](), [government](), [nist](), [sboms](), [secure-by-design](), [security](), [self-hosted](), [snyk](), [snyk-platform](), [terraform](), [vulnerabilities]() ### AI overview This article explains how Snyk for Government helps federal agencies adopt AI securely through secure-by-design development, continuous vulnerability management, compliance support, automation, and governance. It highlights integrations across developer workflows, FedRAMP authorization, standards-aligned practices, and the Snyk AI Trust Platform. ### Source excerpt Learn how Snyk for Government helps federal agencies meet AI mandates with confidence. Snyk's AI Trust Platform ensures secure-by-design development, compliance, and transparent AI systems. ## From Ideas to Impact: How the Bay Area Is Shaping the Future of Secure AI DevFeed: [From Ideas to Impact: How the Bay Area Is Shaping the Future of Secure AI]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2025-08-06T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Trustworthy AI](), [ai security](), [Securing AI](), [Generative AI](), [MCP Server](), [Responsibility & Safety](), [cursor](), [CI/CD](), [sdlc](), [Development](), [AWS Transform]() Tags: [agentic-ai](), [agents](), [ai](), [ai-security](), [application-security](), [awareness](), [blog](), [ci-cd](), [compliance](), [cursor](), [development](), [devsecops](), [executive](), [mcp-server](), [sdlc](), [secure-by-design](), [security](), [snyk-platform](), [trust](), [updates]() ### AI overview This article reports insights from Snyk's Silicon Valley Lighthouse event on building secure, trustworthy AI systems. It examines agentic applications, evolving development workflows, real-time security feedback, and a culture of shared responsibility across development, platform, and security teams. ### Source excerpt Insights from Snyk's Silicon Valley Lighthouse event on building secure, trustworthy AI. Learn how to secure agentic apps, embrace a "secure by everyone" culture, and use guardrails for AI innovation. ## Snyk Joins CISA's Secure by Design Pledge DevFeed: [Snyk Joins CISA's Secure by Design Pledge]() Original publisher: [Read original article]() Author: Brian Campbell Published: 2025-08-05T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security & Privacy](), [MFA](), [cybersecurity and infrastructure security agency](), [passwords](), [Security](), [vulnerability]() Tags: [application-security](), [authentication](), [awareness](), [blog](), [cisa](), [compliance](), [customer](), [cybersecurity](), [devops](), [devsecops](), [executive](), [mfa](), [open-source-security](), [passwords](), [secure-by-design](), [secure-by-design-pledge](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [software](), [supply-chain-security](), [vulnerabilities]() ### AI overview Snyk's CISO describes the company's decision to join CISA's Secure by Design pledge. The article presents the pledge as a set of measurable goals for improving product security, including secure-by-default practices, MFA, eliminating default passwords, and reducing vulnerabilities before software reaches users. ### Source excerpt Snyk's CISO explains why we've joined CISA's Secure by Design pledge. Learn about the 7 key goals for a safer digital world, including MFA, no default passwords, and vulnerability reduction. ## Guarding Azure Functions: Serverless Meets Secure-by-Design Containers DevFeed: [Guarding Azure Functions: Serverless Meets Secure-by-Design Containers]() Original publisher: [Read original article]() Published: 2025-07-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [azure functions](), [chainguard containers](), [azure container apps](), [Serverless](), [container images](), [Node.js](), [Security](), [event driven](), [Cloud]() Tags: [azure](), [azure-functions](), [chainguard-containers](), [cloud](), [container-images](), [event-driven](), [node-js](), [safe-source-for-open-source](), [secure-by-design](), [security](), [serverless]() ### AI overview The article presents Chainguard Containers for Azure Functions, combining serverless deployment with secure-by-design, traceable container images. It describes a customized Node.js base image containing the Azure Functions Host, Node.js Worker for Functions, compatibility support, and extension bundles. ### Source excerpt Chainguard Containers with Azure Functions offers the convenience of serverless and the confidence of a trusted, traceable image built for security. ## Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach DevFeed: [Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-06-25T23:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Testing](), [vulnerability management](), [DevOps](), [Tooling](), [Vulnerabilities](), [Development](), [Open Source]() Tags: [awareness](), [best-practices](), [blog](), [community](), [compliance](), [cra-requirements](), [cyber-resilience-act](), [cybersecurity](), [dependencies](), [deployment](), [developer](), [developers](), [development](), [devops](), [engineering](), [eu](), [scanners](), [secure-by-design](), [security](), [snyk-code](), [snyk-iac](), [snyk-learn](), [snyk-open-source](), [testing](), [vulnerabilities](), [vulnerability](), [vulnerability-management](), [workflows]() ### AI overview This article explains how the Cyber Resilience Act (CRA) changes software delivery expectations for organizations serving the EU. It highlights continuous security validation across proprietary code, open source libraries, and third-party dependencies, and recommends integrated security testing, secure-by-design practices, aligned teams, modern tooling, and security embedded in daily development workflows. ### Source excerpt Learn how to meet CRA requirements with integrated security testing, secure-by-design workflows, and scalable practices for modern dev teams. ## BYOC: Secure by design, proper controls by default DevFeed: [BYOC: Secure by design, proper controls by default]() Original publisher: [Read original article]() Author: Bipin Singh Published: 2025-06-18T00:00:00Z Content type: article Language: en Sources: [Redpanda]() Topics: [Security](), [Software as a service](), [Self-hosted](), [VPC](), [Cloud](), [IAM](), [Deployment](), [Architecture & Design]() Tags: [byoc-deployment](), [cloud-vpc-security](), [compliance-in-cloud-services](), [data-control-and-governance](), [data-streaming-security](), [deployment](), [iam](), [jpmc-software-suppliers-letter](), [product](), [redpanda-byoc](), [redpanda-cloud-features](), [saas](), [saas-operational-simplicity](), [secure-by-default](), [secure-by-design](), [secure-saas-solutions](), [security](), [self-hosted](), [self-hosted-vs-saas-security](), [streaming-data-compliance](), [vpc]() ### AI overview Redpanda argues that JPMorgan Chase's security requirements make secure-by-default design, continuous control validation, governance, and flexible deployment essential for enterprise software. Its Redpanda Cloud BYOC model places the data plane in the customer's VPC while Redpanda operates the control plane, preserving data ownership and operational convenience. ### Source excerpt JPMorgan Chase warns: no governance, no deal. Luckily, Redpanda BYOC provides the security of self-hosted with the convenience of SaaS. Read more. ## Trusted Container Images: A Better Way to Build and Deploy Software DevFeed: [Trusted Container Images: A Better Way to Build and Deploy Software]() Original publisher: [Read original article]() Published: 2025-06-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Docker Hardened Images](), [Containers](), [Security](), [chainguard containers](), [Open Source]() Tags: [buyers-guide](), [chainguard-containers](), [chainguard-libraries](), [chainguard-vms](), [container-images](), [open-source-artifacts](), [secure-by-design](), [secure-container-images](), [secure-open-source-artifacts](), [security](), [supply-chain-security]() ### AI overview Chainguard's Buyer's Guide presents trusted container images and other open source artifacts as a way for enterprise engineering and security teams to reduce maintenance work, address supply-chain risks, and simplify compliance. It highlights Chainguard Containers as minimal, hardened images continuously built from source. ### Source excerpt Chainguard's Trusted Container Images and Open Source Artifacts Buyer's Guide helps you improve supply chain security and reduce costly engineering toil. ## One Year Later: Signing CISA's Secure by Design Pledge DevFeed: [One Year Later: Signing CISA's Secure by Design Pledge]() Original publisher: [Read original article]() Published: 2025-06-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [cisa](), [cve remediation](), [container images](), [MFA](), [Security](), [Single sign-on (SSO)](), [passwords](), [chainguard vms](), [ssh]() Tags: [authentication](), [chainguard](), [chainguard-containers](), [chainguard-vms](), [cisa](), [container-images](), [cve](), [cve-remediation](), [mfa](), [okta](), [password](), [passwords](), [secure-by-design](), [secure-by-design-pledge](), [secure-software](), [security](), [shift-left](), [ssh](), [sso](), [vulnerabilities](), [vulnerability-management]() ### AI overview Chainguard reviews its progress one year after signing CISA's Secure by Design pledge, including CVE remediation across its container images, company-wide MFA through Okta SSO, and password-free access with automated SSH key provisioning for Chainguard VMs. ### Source excerpt Chainguard signed CISA's Secure by Design pledge in 2024. One year later, we look at progress we've made in key areas like CVE remediation and disclosures. ## Have We Reached a Distroless Tipping Point? DevFeed: [Have We Reached a Distroless Tipping Point?]() Original publisher: [Read original article]() Published: 2025-03-18T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [Cloud Native Ecosystem](), [Open Source](), [Linux]() Tags: [beyond-distro](), [cgroups](), [chainguard-os](), [chainguard-your-os](), [cloud-native](), [containers](), [distroless](), [kernel](), [linux](), [oci](), [open-source](), [secure-by-design](), [wolfi]() ### AI overview The article argues that containerization and cloud-native software development have created an inflection point in open source software delivery. It presents the evolution from Linux Containers to Docker and the Open Container Initiative as milestones supporting a shift from traditional Linux distributions toward distroless, secure-by-design, continuously updated software. ### Source excerpt The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next. ## AI Risk Management: Benefits, Challenges, and Best Practices DevFeed: [AI Risk Management: Benefits, Challenges, and Best Practices]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2025-03-13T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI Strategy](), [AI Development](), [Vulnerabilities](), [Security](), [threat detection]() Tags: [ai](), [ai-adoption](), [awareness](), [best-practices](), [blog](), [code-generation](), [developer](), [megawatt](), [secure-by-design](), [security](), [security-vulnerabilities](), [snyk-apprisk](), [snyk-code](), [standards]() ### AI overview This article explains how organizations can manage risks introduced by AI development tools while still benefiting from faster coding and reduced manual work. It covers hidden vulnerabilities in generated code, outdated libraries, logic errors, compliance concerns, automated threat detection, and the use of NIST and ISO guidance to support secure-by-design AI adoption. ### Source excerpt Learn how to manage AI risks effectively with best practices, frameworks, and strategies to ensure secure AI adoption while mitigating vulnerabilities. ## Incorporating security by design: Managing risk in DevSecOps DevFeed: [Incorporating security by design: Managing risk in DevSecOps]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-02-25T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [DevSecOps](), [Application Security](), [sdlc](), [Vulnerabilities](), [Agile]() Tags: [application-security](), [awareness](), [blog](), [dependencies](), [devops](), [devsecops](), [megawatt](), [pmm](), [secure-by-design](), [security](), [shift-left](), [software-development](), [strategy](), [testing](), [vulnerabilities]() ### AI overview This article explains why security should be embedded throughout the application lifecycle, from design and coding through testing and deployment. It presents secure-by-design and DevSecOps practices as ways to mitigate threats early, reduce remediation costs, and integrate security more effectively with developer workflows. ### Source excerpt Explore the business value of mitigating security threats early in the development process and embedding security at every stage throughout the entire application lifecycle, and some of the most effective ways to adopt a secure-by-design approach. ## Announcing Chainguard Custom Assembly: Image Customization Without Complexity DevFeed: [Announcing Chainguard Custom Assembly: Image Customization Without Complexity]() Original publisher: [Read original article]() Published: 2025-02-20T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [open-source-security](), [Containers](), [Security](), [Development]() Tags: [bash](), [chainguard](), [chainguard-custom-assembly](), [chainguard-images](), [complexity](), [container-images](), [curl](), [custom-assembly](), [customization](), [cve](), [cve-remediation](), [development](), [docker](), [image](), [integrity](), [maintenance](), [no-vulnerabilities](), [open-source](), [open-source-software](), [secure-by-design](), [security](), [security-best-practices](), [slsa](), [zero-cves]() ### AI overview Chainguard announces the beta release of Custom Assembly, a product for tailoring Chainguard Images with required packages while preserving hardened builds, security practices, and CVE remediation coverage. The article explains that the product addresses complex, maintenance-heavy customization workflows involving manual image changes, Docker builds, and proprietary pipelines. ### Source excerpt Custom Assembly is Chainguard's new image customization product that enables companies to consume zero-CVE open source software tailored to unique requirements. ## Understanding the EU's Cyber Resilience Act (CRA) DevFeed: [Understanding the EU's Cyber Resilience Act (CRA)]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-01-22T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [cyber resilience act](), [supply-chain-security](), [Security](), [sdlc](), [Application Security](), [snyk]() Tags: [awareness](), [blog](), [compliance](), [cyber-resilience-act](), [eu](), [executive](), [megawatt](), [sast](), [sbom](), [sca](), [sdlc](), [secure-by-design](), [security](), [snyk](), [software-supply-chain-security](), [supply-chain-security]() ### AI overview The article explains how the EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements. It discusses secure-by-design practices, vulnerability handling throughout the product lifecycle, upcoming reporting and compliance deadlines, and the role of SAST, SCA, and software supply chain security. ### Source excerpt Find out how the Cyber Resilience Act (CRA) sets new security standards for the EU and how Snyk can help simplify compliance with its developer-friendly tools. ## The principle of immutability DevFeed: [The principle of immutability]() Original publisher: [Read original article]() Published: 2024-08-20T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Programming](), [Rust](), [Functional programming](), [C++](), [Programming language]() Tags: [c-plus-plus](), [functional-programming](), [immutability](), [rust](), [secure-by-default](), [secure-by-design]() ### AI overview The article argues that immutability is about intentionally controlling change rather than preventing change. It presents immutability by default as part of secure-by-design software and compares approaches in functional programming, C++, and Rust. ### Source excerpt Secure by default starts with immutability. Discover how to control change and minimize risks. ## Chainguard joins Coalition for Secure AI with OpenAI, Google, Anthropic DevFeed: [Chainguard joins Coalition for Secure AI with OpenAI, Google, Anthropic]() Original publisher: [Read original article]() Published: 2024-07-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [ai security](), [supply-chain-security](), [Security for AI](), [Security](), [Open Source]() Tags: [ai-security](), [amazon](), [anthropic](), [chainguard](), [cisco](), [coalition-for-secure-ai](), [cohere](), [cosai](), [google](), [ibm](), [intel](), [microsoft](), [nvidia](), [oasis-open](), [openai](), [provenance](), [secure-by-design](), [software-supply-chain-security](), [standards](), [wiz]() ### AI overview Chainguard joins the Coalition for Secure AI (CoSAI) as a founding member alongside major technology companies. The coalition aims to develop open-source methodologies, standardized frameworks, and practical tools for Secure-by-Design AI systems, with initial workstreams covering AI software supply-chain security, cybersecurity integration, and AI security governance. ### Source excerpt Chainguard joins the Coalition for Secure AI with OpenAI, Google, and Anthropic, enhancing AI security. Discover our commitment to safeguarding AI technologies. ## Signing CISA's Secure by Design pledge DevFeed: [Signing CISA's Secure by Design pledge]() Original publisher: [Read original article]() Published: 2024-05-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [cisa](), [MFA](), [Security](), [Single sign-on (SSO)](), [OpenID connect (OIDC)](), [passwords](), [Auth0](), [Web]() Tags: [auth0](), [authentication](), [best-practices](), [chainguard](), [cisa](), [cve](), [mfa](), [oidc](), [password](), [passwords](), [phishing](), [secure-by-default](), [secure-by-design](), [secure-by-design-pledge](), [secure-software](), [security](), [security-best-practices](), [sso]() ### AI overview Chainguard describes signing CISA's Secure by Design pledge and explains how its products and internal systems address the pledge's goals. The article discusses passwordless human login through SSO, MFA requirements, phishing-resistant security keys, and limitations in provider support for OIDC MFA claims. ### Source excerpt Chainguard proudly signs CISA's Secure by Design pledge. Learn why we support this critical software security initiative. ## Lessons in logging: chopping down security risks using audit trails DevFeed: [Lessons in logging: chopping down security risks using audit trails]() Original publisher: [Read original article]() Published: 2023-11-28T15:30:00Z Content type: tutorial Language: en Sources: [Latacora]() Topics: [Logging](), [audit](), [Security](), [Architecture & Design]() Tags: [audit](), [logging](), [logs](), [secure-by-design](), [security]() ### AI overview This first post in a series explains logging and audit trails from a security perspective. It introduces secure logging requirements and describes how logs can support threat identification, incident investigation, remediation, and tracking user access or changes over defined time windows. ### Source excerpt This post is the first in a series about logging and audit trails from a security perspective. For the next post in the series, see Lessons in Logging, Part 2: Mapping Your Path to a Mature Security Program with Logs and Audit Trails At Latacora, we bootstrap security practices. We partner with companies that frequently have minimally developed security programs, work with them to figure out the right security practices for their current size, and then help them evolve and scale those practices as their business matures. ## Threat Modeling and Secure by Design DevFeed: [Threat Modeling and Secure by Design]() Original publisher: [Read original article]() Author: Adam Published: 2023-07-19T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [cisa]() Tags: [complex](), [secure-by-design]() ### AI overview The Threat Modeling Manifesto team published feedback to CISA responding to its Secure by Design Guidance. The feedback takes the form of a detailed letter, which was also covered by Infosecurity Magazine. ### Source excerpt Our feedback to CISA is now public [Next page]()