# wiz

Published articles for wiz.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java

DevFeed: [Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java](<https://devfeed.tech/articles/fewer-cves-more-accurate-findings-wiz-now-scans-chainguard-libraries-for-python-and-java-13335.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/wiz-now-scans-chainguard-libraries-for-python-and-java>)

Published: 2026-06-25T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [chainguard libraries for python](<https://devfeed.tech/topics/chainguard-libraries-for-python.md>), [Java](<https://devfeed.tech/topics/java.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-java](<https://devfeed.tech/tags/chainguard-libraries-for-java.md>), [chainguard-libraries-for-python](<https://devfeed.tech/tags/chainguard-libraries-for-python.md>), [cves](<https://devfeed.tech/tags/cves.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [java](<https://devfeed.tech/tags/java.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [wiz](<https://devfeed.tech/tags/wiz.md>), [wiz-chainguard-libraries](<https://devfeed.tech/tags/wiz-chainguard-libraries.md>), [wiz-chainguard-scanner](<https://devfeed.tech/tags/wiz-chainguard-scanner.md>)

### AI overview

Wiz now scans Chainguard Libraries for Python and Java. The partnership combines source-built dependencies and backported fixes with Wiz's risk context and visibility, helping organizations assess vulnerabilities, prioritize remediation, and verify artifact provenance.

### Source excerpt

Wiz now scans Chainguard Libraries for Python and Java, combining trusted, source-built dependencies with risk-based visibility and remediation.

## Ingress-nginx-controller: Nightmare on CVE Street

DevFeed: [Ingress-nginx-controller: Nightmare on CVE Street](<https://devfeed.tech/articles/ingress-nginx-controller-nightmare-on-cve-street-13103.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/ingress-nginx-controller-nightmare-on-cve-street>)

Published: 2025-04-02T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [nginx](<https://devfeed.tech/topics/nginx.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [chainguard os](<https://devfeed.tech/topics/chainguard-os.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>)

Tags: [availability](<https://devfeed.tech/tags/availability.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-os](<https://devfeed.tech/tags/chainguard-os.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [ingress](<https://devfeed.tech/tags/ingress.md>), [ingress-nginx](<https://devfeed.tech/tags/ingress-nginx.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [nginx](<https://devfeed.tech/tags/nginx.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [wiz](<https://devfeed.tech/tags/wiz.md>)

### AI overview

The article describes several critical remote code execution vulnerabilities affecting the Ingress-nginx-controller, including risks to Kubernetes cluster secrets, service availability, privileges, and security controls. It also explains how Chainguard reviewed its infrastructure, identified affected Chainguard Containers, and prepared patches using Chainguard OS's continuous update model.

### Source excerpt

Chainguard was able to quickly respond to and handle the recent ingress-nginx-controller CVEs that were discovered by Wiz. See the actions we have taken.

## Chainguard joins Coalition for Secure AI with OpenAI, Google, Anthropic

DevFeed: [Chainguard joins Coalition for Secure AI with OpenAI, Google, Anthropic](<https://devfeed.tech/articles/chainguard-joins-coalition-for-secure-ai-with-openai-google-anthropic-12963.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-joins-coalition-for-secure-ai-with-openai-google-anthropic>)

Published: 2024-07-18T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [ai security](<https://devfeed.tech/topics/ai-security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security for AI](<https://devfeed.tech/topics/security-for-ai.md>), [Security](<https://devfeed.tech/topics/security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [ai-security](<https://devfeed.tech/tags/ai-security.md>), [amazon](<https://devfeed.tech/tags/amazon.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [coalition-for-secure-ai](<https://devfeed.tech/tags/coalition-for-secure-ai.md>), [cohere](<https://devfeed.tech/tags/cohere.md>), [cosai](<https://devfeed.tech/tags/cosai.md>), [google](<https://devfeed.tech/tags/google.md>), [ibm](<https://devfeed.tech/tags/ibm.md>), [intel](<https://devfeed.tech/tags/intel.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [oasis-open](<https://devfeed.tech/tags/oasis-open.md>), [openai](<https://devfeed.tech/tags/openai.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [standards](<https://devfeed.tech/tags/standards.md>), [wiz](<https://devfeed.tech/tags/wiz.md>)

### AI overview

Chainguard joins the Coalition for Secure AI (CoSAI) as a founding member alongside major technology companies. The coalition aims to develop open-source methodologies, standardized frameworks, and practical tools for Secure-by-Design AI systems, with initial workstreams covering AI software supply-chain security, cybersecurity integration, and AI security governance.

### Source excerpt

Chainguard joins the Coalition for Secure AI with OpenAI, Google, and Anthropic, enhancing AI security. Discover our commitment to safeguarding AI technologies.

## Hugging Face partners with Wiz Research to Improve AI Security

DevFeed: [Hugging Face partners with Wiz Research to Improve AI Security](<https://devfeed.tech/articles/hugging-face-partners-with-wiz-research-to-improve-ai-security-7243.md>)

Original publisher: [Read original article](<https://huggingface.co/blog/hugging-face-wiz-security-blog>)

Author: Josef Fukano; Guillaume Salou; Michelle Habonneau; Adrien Carreira; Luc Georges; Nicolas Patry; Julien Chaumond

Published: 2024-04-04T00:00:00Z

Content type: article

Language: en

Sources: [Hugging Face - Blog](<https://devfeed.tech/sources/hugging-face-blog.md>)

Topics: [hugging face](<https://devfeed.tech/topics/hugging-face.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [cloud security](<https://devfeed.tech/topics/cloud-security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [hugging-face](<https://devfeed.tech/tags/hugging-face.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [security](<https://devfeed.tech/tags/security.md>), [wiz](<https://devfeed.tech/tags/wiz.md>)

### AI overview

Hugging Face describes its collaboration with Wiz researchers and security improvements to its platform. The post says issues involving sandboxed compute environments and pickle were resolved, and outlines use of Wiz for vulnerability management, cloud security posture management, and automated remediation.

### Source excerpt

We're on a journey to advance and democratize artificial intelligence through open source and open science.

## A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi

DevFeed: [A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi](<https://devfeed.tech/articles/a-growing-ecosystem-of-vulnerability-scanners-that-now-support-chainguard-images-and-wolfi-12857.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/a-growing-ecosystem-of-vulnerability-scanners-that-now-support-chainguard-images-and-wolfi>)

Published: 2023-09-21T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [trivy](<https://devfeed.tech/topics/trivy.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container](<https://devfeed.tech/tags/container.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve](<https://devfeed.tech/tags/cve.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [grype](<https://devfeed.tech/tags/grype.md>), [prisma-cloud](<https://devfeed.tech/tags/prisma-cloud.md>), [sca](<https://devfeed.tech/tags/sca.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [secure-images](<https://devfeed.tech/tags/secure-images.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [trivy](<https://devfeed.tech/tags/trivy.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [wiz](<https://devfeed.tech/tags/wiz.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard Images and the Wolfi distribution are now supported by a growing ecosystem of open-source and enterprise vulnerability scanners, including Docker Scout, Grype, Snyk, Trivy, and Wiz. The broader integration helps users monitor and prioritize scan results, verify vulnerabilities, reduce scanner noise and false positives, and build more secure software.

### Source excerpt

Secure your software with Chainguard & Wolfi, now recognized by leading vulnerability scanners.