Latest Stories
![](https://www.chef.io/images/cheflibraries/blogs/chef-e2-80-99s-approach-to-cis-critical-security-controls-v7-0-blog.png?sfvrsn=b3a7a03d_0)
Protect Yourself From the RubyGems Backdoor by InSpec’ing Your Fleet
Chef has invested a lot with the Enterprise Automation Stack in security. With Chef InSpec you can easily scan your systems for potential vulnerabilities and then leverage Chef Infra to run remediation across your entire fleet. This is important because last week’s RubyGems vulnerability likely affected other software you have deployed that uses Ruby.
![](https://www.chef.io/images/cheflibraries/blogs/chef-e2-80-99s-approach-to-cis-critical-security-controls-v7-0-blog.png?sfvrsn=b3a7a03d_0)
Chef Confirms No Products Affected by Backdoored RubyGems
At Chef, we have a cross-functional security team who evaluates and responds to potential security incidents. Because a significant portion of our code uses Ruby and Ruby libraries (known as “gems”), we have been paying close attention to the reports of malicious code insertion into several gems.
![](https://www.chef.io/images/cheflibraries/blogs/road-trip-epi.png?sfvrsn=727c5cd3_0)
LCR Road Trip: Driving Compliance in the age of DevSecOps
Hitting the Road with Learn Chef Rally Are you concerned with securing systems and ensuring changes do not open security holes? Do you want to avoid having your changes rejected in security review or having to redo the work?
![](https://www.chef.io/images/cheflibraries/blogs/lcr-excitement-blog.png?sfvrsn=6f5ef2fe_0)
Learn Chef Rally: What a Treat!
The Learn Chef Rally team is celebrating a major milestone, and you’re invited to party with us!
![](https://www.chef.io/images/cheflibraries/blogs/security-blog-header.png?sfvrsn=dfa68dd4_0)
Cloud Security Assessments in AWS
In our most recent webinar, Cloud Security Assessment for AWS Instances, we took a look at how Chef can help to secure environments in Amazon Web Services.
![](https://www.chef.io/images/cheflibraries/blogs/security-blog-header.png?sfvrsn=dfa68dd4_0)
Secure Your Cloud Estate with Continuous Audits
To meet the demands of an ever more connected world, executing on a comprehensive cloud strategy has become a critical component for organizations at any scale.
![](https://www.chef.io/images/cheflibraries/blogs/5-steps-blog-header.png?sfvrsn=e4d7dae3_0)
5 Steps for Scaling DevOps
During a webinar delivered by Chef’s SVP of Products and Engineering Corey Scobie, the following five common practices used by DevOps high performers were described: Adopt a coded approach Make it easy to work with code Use the right tool for the right job Enable one way to production Shift risk mitigation left During the […]
![](https://www.chef.io/images/cheflibraries/blogs/security-blog-header.png?sfvrsn=dfa68dd4_0)
Don’t Leave Your S3 Buckets Wide Open
IT security can feel like an endless war against the unknown. Especially when your big old comfortable monolith with one access point gets spread out into a million small microservice pieces all over the place. Securing distributed systems is a challenge that requires constant vigilance and attention to detail.
![](https://www.chef.io/images/cheflibraries/blogs/practical-guide-to-cloud-migration-with-chef-blog.png?sfvrsn=45af48bf_0)
Why Coded Enterprises are Winning at DevOps
More than 10 years ago Chef ushered in the era of DevOps with the introduction of Chef, the “infrastructure as code” tool. Fundamental to the success of Chef was the belief that “the best way to build software is to do it in close collaboration with the people who use it.