Morningstar Chainguard and Cursor Enhance Security for AI-Driven Software Development
Article Content
- •Chainguard and Cursor partner to secure AI-driven software development.
- •84% of developers use AI agents, increasing risk from supply chain attacks.
- •The partnership provides secure-by-default artifacts to mitigate security risks.
Chainguard and Cursor have partnered to improve security in agentic software development by providing secure-by-default open source artifacts. This collaboration aims to close the software supply chain trust gap, as 84% of developers are now using AI agents that rely on public registries vulnerable to supply chain attacks. Recent incidents have shown how malicious packages can infiltrate popular open source projects, leading to significant operational and financial risks. The partnership ensures that every dependency within AI-generated code is sourced from verifiable and secure origins, allowing organizations to scale their AI-driven development safely. The initiative responds to the growing need for security in environments where dependency selection occurs programmatically at scale, without traditional manual review processes. This new approach is crucial as organizations face increasing threats from compromised artifacts in production pipelines.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Continue Reading
PHP2Shell Attack Chain Compromises 25 Servers in U.S. Government Environment Dream reported a PHP2Shell attack chain that compromised 25 servers, including those in a U.S. government-affiliated environment. The investigation revealed that an exposed firewall management interface allowed attackers to access internal identity infrastructure. The attack utilized PHP2Shell (CVE-2026-109618 and…