RedMonk co-founder James Governor reports from Chainguard Assemble 2026 in London with a Quick Take on Chainguard’s third act. Best known for creating the hardened container images market, Chainguard is beginning to position itself as a general infrastructure provider with security built in, rather than primarily a security vendor. James breaks down the two key
Security Update: Suspected Supply Chain Incident | liteLLM
As of 2:00 PM ET on March 24, 2026
Attacking & Auditing Docker Containers Using Open Source tools
Cursor + Chainguard | Chainguard Partnerships
Chainguard and Cursor partner to make secure-by-default JavaScript, Python, and Java open source dependencies your trusted default for AI-generated code.
RKNF404/chromium-hardening-guide
Harden chromium (somewhat) for privacy and security (and performance)
Who Is Joel Kaplan, Meta’s New Global Policy Chief? (Published 2025)
The longtime Republican lobbyist for Meta was named to the company’s top policy role last week.
LiteLLM PyPI Supply Chain Attack Enables RCE & Exfiltration - Upwind
LiteLLM 1.82.7 and 1.82.8 on PyPI execute malicious .pth payloads, steal credentials, and spread in Kubernetes. Full detection and mitigation guidance.
SGX.Fail
Intel's Software Guard Extension (SGX) promises an isolated execution environment, protected from all software running on the machine. In the past few years, however, SGX has come under heavy fire, threatened by numerous side channel attacks. With Intel repeatedly patching SGX to regain security, we set out to explore the effectiveness of SGX's update mechanisms to prevent attacks on real-world deployments.
linuxkit/linuxkit
A toolkit for building secure, portable and lean operating systems for containers
FOSDEM 2025 - Spritely and a secure, collaborative, distributed future
Spritely's vision is a world where everyone can access secure collaboration tools without gatekeepers. This requires building a new technical foundation upon which decentralized systems naturally arise. And that's exactly what we're doing! This presentation is going to look at the roadmap of what we have now, what we want for our end-users, and how we're going to get there.
Container Escape Techniques: Breaking Out of the Digital Jail
How Attackers Break Free From Containerized Environments and What Defenders Need to Know
Agent Skills | Chainguard
Agents are only as safe as the skills you give it. Stop letting it pick up unvetted dependencies from the digital sidewalk.
Brennan Kenneth Brown (@brennan@social.lol)
Because $18 million dollars isn't enough for some people, I have *more* people and organisations of note to list as paying Omarchy patrons (there are over hundreds in total): - Axel Fontaine is the creator of Flyway, the widely used database migration tool he sold to Redgate in 2019. He's also submitted code to the Omarchy repo, both a funder and a hands-on contributor. - Marc Köhlbrugge is the founder of WIP and BetaList, fixtures of the indie-hacker/bootstrapper scene that Omarchy's ricing bullshit aesthetic is clearly courting. - ServiceStack is an established .NET web-services framework vendor, one of the patrons backing the project as a company rather than an individual. - Bertrand Janin is a longtime open-source developer (ex-Ramp, ex-Truveris) running his own small shop, Atelier Janin. - Pagecord, the blogging platform created by Olly. - Vincent Ritter, founder of Tinylytics and Scribbles, known for complaining about being offended by pronouns, being disappointed by more inclusive Apple emoji, disparaging "foreigners" who drive for Uber and play "foul rap music," and praising Elon Musk the day after he performed two Nazi salutes on camera. Manton Reece, of micro.blog, publicly defends him. - 9538-7874 Quebec inc. is one of at least a couple of numbered, unnamed Canadian corporations on the list. Bizarre shell companies with no public identity attached to them at all. Unsure about these. https://omarchy.org/patrons/
keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.
defcon-26-workshop-attacking-and-auditing-docker-containers/dryrun.todo at master · appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers
DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source - appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers
Kasper Svenning — Designer and Tech Enthusiast
Designer and Tech Enthusiast. Co-Founder of Nordcraft.com. Former Industrial Designer, MedTech Consultant, Illustrator and 3D Artist. Master of Science in Engineering from the Technical University of Denmark.
Supply chain attack on arrayref | Rust Blog
Empowering everyone to build reliable and efficient software.
