buildOne report1 publisher Chainguard runs coding agents in remote microVMs and proposes signed attestations as the merge gate
Chainguard has launched two beta products, Workspaces and Checks, that run coding agents in remote microVMs and move CI into the dev loop. Keeping agents off laptops that hold corporate credentials costs teams a dependency on Chainguard's execution and signing system, InfoQ reported.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives
- Not scored
- Confidence45
Chainguard's 1,300-leader survey finds 66% at $1bn-plus firms knowingly leave high or critical flaws unpatched at least sometimes, versus 27% under $250m. The all-respondent rate is 54%, LeadDev reported, with testing and disruption the stated blockers.
Perspective Coverage
4 publishers
- Builder
- Builder 34%
- Operator
- Operator 62%
- Investor
- Investor 4%
Reality
- Evidence55
- Adoption50
- Hype gap+25
- Incentives65
- Confidence55
Chainguard said its scanner returned malware verdicts on more than 5,000 Go and .NET packages during beta. More than 10% had no public match at detection, over 500 verdicts on the vendor's own count.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+35
- Incentives85
- Confidence60
Chainguard unveiled Harness, which has frontier models such as Claude Mythos 5.1 attack a live build and reports only flaws that reproduce. It arrived with Workspaces and Checks for coding agents and an expansion of Libraries to Go and .NET.
Perspective Coverage
4 publishers
- Builder
- Builder 32%
- Operator
- Operator 44%
- Investor
- Investor 24%
Reality
- Evidence35
- Adoption12
- Hype gap+30
- Incentives70
- Confidence70
Chainguard's Mythos harness finds a vLLM flaw that lets one client dictate another's output
Chainguard says its Mythos harness found a vLLM flaw, left in the public tracker for four months, that lets one client force another client's output. Versions before v0.31.0 are affected, and nothing is logged when the forced answer returns.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap−5
- Incentives65
- Confidence60
GitHub limits private vulnerability reports per day to spare maintainers' review time
GitHub now caps the private vulnerability reports one account can file each day, at thresholds it has not published. Admins can set their own limit and exempt trusted researchers.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives30
- Confidence55
buildOne report1 publisher Go 1.27 executes a poisoned dependency at go test in a replay of npm's August 4 worm
Go 1.27 ran none of a poisoned module's code on go get, go build or go vet in a replay of npm's August 4 worm, but go test ran it with GITHUB_TOKEN in reach. Go teams still carry exposure through CI test runs, versions that stay cached for good, and bots that edit go.mod.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Chainguard discloses 14 Java bugs that were fixed upstream but never got a CVE
Chainguard disclosed 14 Java vulnerabilities that were fixed upstream but never assigned a CVE, one rated critical and one high. Teams still on the affected versions got no scanner alert, some for years, because nobody announced the fixes when they landed at HEAD.
Reality
- Evidence40
- Adoption25
- Hype gap+10
- Incentives75
- Confidence45
buildOne report1 publisher An agent now picks the packages the person prompting it will never see
GitHub's volume counters and Chainguard's account of agent-written code both point at dependency review as the step nobody is doing. Mandiant estimates mean time-to-exploit at minus seven days in 2025.
Reality
- Evidence43
- Adoption55
- Hype gap+27
- Incentives76
- Confidence42
buildOne report1 publisher Chainguard's CVE authority will give scanners version ranges for flaws fixed years ago
Chainguard says its Athena coalition will start releasing about 50 findings on September 28, with affected version ranges attached. A scanner needs those ranges before it can flag a pinned old release.
Reality
- Evidence55
- Adoption30
- Hype gap+10
- Incentives75
- Confidence52
Chainguard opens Athena's 40,000-finding backlog on September 28 with fifty silent fixes
Chainguard says fix generation was never its bottleneck and that responsible disclosure at scale is, so its first public batch is built from bugs upstreams quietly fixed years ago and never filed CVEs for.
Reality
- Evidence34
- Adoption16
- Hype gap+28
- Incentives82
- Confidence48
buildOne report1 publisher AWS credits a direct competitor with more closed deals than any Security Hub Extended partner
The ranking arrives with no deal count and no partner roster, so the part a buyer can actually check is the plumbing under it, which is pay-as-you-go billing on an account you already own and findings normalised to OCSF.
Reality
- Evidence32
- Adoption42
- Hype gap+44
- Incentives92
- Confidence70
Minimus's wind-down makes the hardened base image a continuity line item
Echo picked up the assets after Minimus decided to close, so this time the customers have somewhere to land. Anyone pinning a base image to one publisher is buying that publisher's rebuild queue too.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+32
- Incentives78
- Confidence42
buildOne report1 publisher Flux moves GitOps' source of truth into registries you own, and mirroring becomes the prerequisite
Flux Mirror ships as a v2.9 CLI plugin that copies images, charts and desired-state artifacts from a config file. The Bitnami catalogue freeze is the argument for using it.
Reality
- Evidence42
- Adoption15
- Hype gap+27
- Incentives72
- Confidence46
LiteLLM 1.82.7 and 1.82.8 shipped an infostealer: rotate everything those machines touched
GitGuardian says the TeamPCP campaign poisoned two LiteLLM releases on PyPI to harvest SSH keys, cloud credentials and API tokens. Detection is the cheap part of this job.
Publishers:blog.gitguardian.com
Reality
- Evidence52
- Adoption27
- Hype gap+24
- Incentives78
- Confidence46
Akrites switches on in September with 20-odd members and a one-to-10 engineer donation band
The Linux Foundation's coalition for AI-generated vulnerability reports starts taking automated submissions next month. Its membership terms set the ceiling on what it can absorb.
Reality
- Evidence38
- Adoption41
- Hype gap+28
- Incentives68
- Confidence45
A $51M seed with no product: what investors were actually buying
The Twistlock founders raised thirteen to seventeen times the cybersecurity seed norm, then binned the product it funded. The pivot is the most useful part of the story.
Reality
- Evidence56
- Adoption45
- Hype gap+14
- Incentives62
- Confidence52
buildOne report1 publisher AWS gives software supply chain its own Security Hub category, with two vendors in it
Security Hub Extended now pipes Chainguard and Socket findings into the same OCSF stream as endpoint and identity signals. Two curated partners is a category, not a market.
Reality
- Evidence42
- Adoption28
- Hype gap+34
- Incentives88
- Confidence46