# cve remediation CVE remediation is the process of identifying, prioritizing, and resolving publicly disclosed software vulnerabilities across production software. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Custom Assembly Updates: Create Multiple, Customized Variants of a Chainguard Container DevFeed: [Custom Assembly Updates: Create Multiple, Customized Variants of a Chainguard Container]() Original publisher: [Read original article]() Published: 2025-10-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard custom assembly](), [chainguard containers](), [container images](), [cve remediation]() Tags: [assembly](), [chainguard-containers](), [chainguard-custom-assembly](), [chainguard-images](), [container-images](), [custom-assembly](), [custom-chainguard-containers](), [custom-chainguard-images](), [customers](), [cve-remediation](), [new-feature]() ### AI overview Chainguard announces enhancements to Custom Assembly that let customers create, add, delete, rename, edit, preview, and manage multiple customized variants of Chainguard container images directly in the console. The update supports self-serve provisioning and includes build history, logs, and build status. ### Source excerpt Customize Chainguard Containers with the latest Custom Assembly update. You can create, edit, and manage secure, zero-CVE image variants directly in the console. ## The Business Costs of CVE Management and the Value of Chainguard Containers DevFeed: [The Business Costs of CVE Management and the Value of Chainguard Containers]() Original publisher: [Read original article]() Published: 2025-06-23T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [cve remediation](), [chainguard containers](), [Containers](), [Vulnerabilities](), [Security]() Tags: [business-value-assessment](), [bva](), [chainguard-containers](), [container-images](), [cve-remediation](), [cves](), [report](), [research](), [security](), [vulnerabilities]() ### AI overview The article discusses the operational and business costs of managing CVEs in containerized software environments. It presents Chainguard's evaluation of customer benefits from using Chainguard Containers, including reported savings on CVE remediation and container-image hardening, as well as potential value from reduced security risk and redeployed engineering capacity. ### Source excerpt Chainguard evaluated the amount of money customers are saving and unlocking by utilizing Chainguard Containers as their secure container image solution. ## One Year Later: Signing CISA's Secure by Design Pledge DevFeed: [One Year Later: Signing CISA's Secure by Design Pledge]() Original publisher: [Read original article]() Published: 2025-06-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [cisa](), [cve remediation](), [container images](), [MFA](), [Security](), [Single sign-on (SSO)](), [passwords](), [chainguard vms](), [ssh]() Tags: [authentication](), [chainguard](), [chainguard-containers](), [chainguard-vms](), [cisa](), [container-images](), [cve](), [cve-remediation](), [mfa](), [okta](), [password](), [passwords](), [secure-by-design](), [secure-by-design-pledge](), [secure-software](), [security](), [shift-left](), [ssh](), [sso](), [vulnerabilities](), [vulnerability-management]() ### AI overview Chainguard reviews its progress one year after signing CISA's Secure by Design pledge, including CVE remediation across its container images, company-wide MFA through Okta SSO, and password-free access with automated SSH key provisioning for Chainguard VMs. ### Source excerpt Chainguard signed CISA's Secure by Design pledge in 2024. One year later, we look at progress we've made in key areas like CVE remediation and disclosures. ## What FedRAMP 20x Means for You DevFeed: [What FedRAMP 20x Means for You]() Original publisher: [Read original article]() Published: 2025-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Automation](), [authority to operate](), [chainguard](), [chainguard containers](), [container-security](), [cve remediation](), [Security]() Tags: [authority-to-operate](), [automation](), [chainguard-containers](), [complexity](), [compliance](), [container-security](), [cost](), [cve-remediation](), [cves](), [fedramp](), [fedramp-20x](), [monitoring](), [security](), [vulnerabilities]() ### AI overview The article explains that FedRAMP 20x is intended to streamline the authority-to-operate process through automation and continuous validation. It says the core security and compliance controls are not changing and that the existing agency-based FedRAMP Rev. 5 authorization path remains active. ### Source excerpt FedRAMP 20x is a new initiative designed to automate and simplify the FedRAMP process. Get the rundown on what is changing, and how Chainguard can help. ## Proposed HIPAA Security Rule Updates for Vulnerability Management DevFeed: [Proposed HIPAA Security Rule Updates for Vulnerability Management]() Original publisher: [Read original article]() Published: 2025-02-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability management](), [cve remediation](), [supply-chain-security](), [Security]() Tags: [chainguard-images](), [compliance](), [container-images](), [cve-remediation](), [cves](), [fedramp](), [hipaa](), [security](), [vulnerability-management]() ### AI overview The article explains proposed updates to HIPAA's Security Rule, including requirements for container security, risk analysis, data-security practices, and remediation of Common Vulnerabilities and Exposures (CVEs). It states that the proposal would require healthcare organizations to address Critical CVEs within 15 calendar days of discovery. ### Source excerpt New guidelines for HIPAA's Security Rule have been proposed, which include updated requirements for vulnerability management, risk management, and more.