corpus.blog
41554 blogs · [ { "id": "01a0b688-b377-7287-8add-28bcae8f008a", "title": "Detection scaled. The loop did not.", "url": "https://www.mend.io/blog/appsec-remediation-gap-detection-scaled/", "published_at": "2026-09-10T14:52:27+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcaf426081", "title": "Mend Renovate Enterprise: managing dependencies at agentic scale", "url": "https://www.mend.io/blog/mend-renovate-enterprise-agentic-scale/", "published_at": "2026-09-03T22:05:36+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb001a078", "title": "Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions", "url": "https://www.mend.io/blog/mini-shai-hulud-hits-openapi-react-query-codegen/", "published_at": "2026-08-29T16:19:11+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb0b2855c", "title": "The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right", "url": "https://www.mend.io/blog/owasp-agentic-skills-top-10-supply-chain-security/", "published_at": "2026-08-26T15:07:22+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb1603ee6", "title": "OWASP LLM Top 10 2026: the model will be fooled, the question is what breaks", "url": "https://www.mend.io/blog/owasp-llm-top-10-2026/", "published_at": "2026-08-13T15:44:55+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb24663a1", "title": "EU AI Act: risk tiers, timeline, and compliance requirements", "url": "https://www.mend.io/blog/eu-ai-act/", "published_at": "2026-08-11T21:47:00+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb25ec479", "title": "That’s a wrap: Mend.io at Black Hat USA 2026", "url": "https://www.mend.io/blog/mend-io-black-hat-usa-2026/", "published_at": "2026-08-07T20:49:23+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb2bff520", "title": "Patch faster isn’t the answer. Patch smarter is.", "url": "https://www.mend.io/blog/smarter-patch-management/", "published_at": "2026-08-04T20:02:00+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb3b75d90", "title": "Mini Shai-Hulud Hits keyv: Trojanized Release Exfiltrates CI Secrets via GitHub", "url": "https://www.mend.io/blog/keyv-malicious-packages/", "published_at": "2026-08-04T15:46:46+00:00" }, { "id": "01a0b688-b377-7287-8add-28bcb483d919", "title": "EU CRA explained: requirements, timeline, and compliance", "url": "https://www.mend.io/blog/eu-cyber-resilience-act-compliance-guide/", "published_at": "2026-07-30T14:26:00+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02640969743", "title": "Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update", "url": "https://www.mend.io/blog/move-faster-than-ai-driven-risk-inside-mend-ios-latest-ai-application-security-update/", "published_at": "2026-07-28T13:03:08+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02640ece58c", "title": "Top 13 AI security testing solutions for dev pipelines in 2026", "url": "https://www.mend.io/blog/ai-security-testing-solutions-for-dev-pipelines/", "published_at": "2026-07-23T15:58:00+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02641421e52", "title": "199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran", "url": "https://www.mend.io/blog/rubygems-cryptomining-campaign/", "published_at": "2026-07-22T21:40:31+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b0264150d210", "title": "Best 6 AI security posture management platforms (AI-SPM) in 2026", "url": "https://www.mend.io/blog/ai-security-posture-management-platforms/", "published_at": "2026-07-21T18:09:05+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02641b8a6f2", "title": "Checkmarx One: 7 features, limitations & alternatives", "url": "https://www.mend.io/blog/checkmarx-one-features-limitations-alternatives/", "published_at": "2026-07-16T21:52:00+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02642b7bbf4", "title": "Independence is the moat", "url": "https://www.mend.io/blog/independence-is-the-moat/", "published_at": "2026-07-14T13:42:12+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b026435eaf0f", "title": "Dependency management tools: Key features and 6 tools to know in 2026", "url": "https://www.mend.io/blog/dependency-management-tools/", "published_at": "2026-07-09T22:32:05+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b0264427d069", "title": "The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.", "url": "https://www.mend.io/blog/ecb-ai-cybersecurity-letter/", "published_at": "2026-07-08T20:17:55+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b02644a8718a", "title": "Best AI Governance Platforms for Enterprises: Top 6 in 2026", "url": "https://www.mend.io/blog/best-ai-governance-platforms-for-enterprises/", "published_at": "2026-07-07T14:04:38+00:00" }, { "id": "01a0c513-a8f1-7309-9f98-b026451565b7", "title": "9-Step AI Governance Implementation Strategy and the Solutions to Know", "url": "https://www.mend.io/blog/ai-governance-implementation-strategies/", "published_at": "2026-07-02T22:12:04+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac1509689", "title": "RubyGems supply chain attack: malware used as a credential exfiltration dead drop", "url": "https://www.mend.io/blog/rubygems-supply-chain-attack-dead-drop/", "published_at": "2026-07-01T21:31:00+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac178693c", "title": "Evaluating AI Security Posture Management Tools: 7 Key Criteria", "url": "https://www.mend.io/blog/evaluating-ai-security-posture-management-tools/", "published_at": "2026-07-01T14:16:03+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac1c6fb10", "title": "When the guardrails held and the attack still worked", "url": "https://www.mend.io/blog/ai-assisted-attacks-1000-agent-sessions/", "published_at": "2026-06-30T16:58:14+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac297a493", "title": "Attestation in Cybersecurity: Types, Uses & Best Practices", "url": "https://www.mend.io/blog/cybersecurity-attestation/", "published_at": "2026-06-25T20:25:31+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac387031b", "title": "Runtime protection: Threats, technologies, and 5 best practices", "url": "https://www.mend.io/blog/runtime-protection/", "published_at": "2026-06-23T17:50:34+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac3cf859e", "title": "AI changed what you ship. It also changed what you have to secure.", "url": "https://www.mend.io/blog/ai-changed-what-you-ship-it-also-changed-what-you-have-to-secure/", "published_at": "2026-06-22T18:15:45+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac467f606", "title": "Best AI security posture management vendors: Top 6 in 2026", "url": "https://www.mend.io/blog/ai-security-posture-management-vendors/", "published_at": "2026-06-19T20:47:00+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac4d43468", "title": "Frontier Model Is the Wrong Meter for Continuous Security", "url": "https://www.mend.io/blog/frontier-model-continuous-security-cost/", "published_at": "2026-06-18T11:10:00+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac57a719e", "title": "Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper", "url": "https://www.mend.io/blog/mastra-npm-scope-takeover-easy-day-js/", "published_at": "2026-06-17T10:32:53+00:00" }, { "id": "01a0c51f-c23d-70a8-99bf-95fac5ce185e", "title": "Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSec", "url": "https://www.mend.io/blog/ai-generated-code-security-independent-verification/", "published_at": "2026-06-16T16:35:31+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e597378338", "title": "AI code review tools: Key benefits and 8 tools to know in 2026", "url": "https://www.mend.io/blog/ai-code-review-tools-key-benefits-and-tools/", "published_at": "2026-06-12T15:49:00+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e5981f623a", "title": "Best Software Composition Analysis Services: Top 8 in 2026", "url": "https://www.mend.io/blog/best-software-composition-analysis-services/", "published_at": "2026-06-09T22:33:50+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e59883e39e", "title": "AI Security Agents: Key Capabilities and 5 Critical Best Practices", "url": "https://www.mend.io/blog/ai-security-agents/", "published_at": "2026-06-04T22:44:20+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e5992e21a5", "title": "AI Guardrails in 2026: Types, Challenges, and Impact of Agentic AI", "url": "https://www.mend.io/blog/deploying-gen-ai-guardrails-for-compliance-security-and-trust/", "published_at": "2026-06-02T20:23:00+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e599db3697", "title": "Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign", "url": "https://www.mend.io/blog/redhat-cloud-services-packages-drop-multi-cloud-credential-stealer/", "published_at": "2026-06-01T18:14:44+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e599e23a48", "title": "OWASP Top 10 for LLM Applications: Risks, Impact, and Mitigation", "url": "https://www.mend.io/blog/2025-owasp-top-10-for-llm-applications-a-quick-guide/", "published_at": "2026-05-28T14:18:00+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e59a0a3a72", "title": "Best Application Security Testing Providers: Top 8 in 2026", "url": "https://www.mend.io/blog/best-application-security-testing-providers/", "published_at": "2026-05-26T18:59:00+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e59a2dd3b8", "title": "Laravel-Lang Composer tag-rewrite Supply Chain Attack", "url": "https://www.mend.io/blog/laravel-lang-composer-tag-rewrite-supply-chain-attack/", "published_at": "2026-05-22T17:17:04+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e59a93a11e", "title": "Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account", "url": "https://www.mend.io/blog/mini-shai-hulud-antv-atool-npm-supply-chain-attack/", "published_at": "2026-05-19T14:04:53+00:00" }, { "id": "01a0c52a-dcf1-7208-b4d3-65e59af62e1a", "title": "Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread", "url": "https://www.mend.io/blog/inside-the-rubygems-supply-chain-attack/", "published_at": "2026-05-14T14:50:47+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed238314230e", "title": "Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave", "url": "https://www.mend.io/blog/mini-shai-hulud-is-back-172-npm-and-pypi-packages-compromised-in-latest-wave/", "published_at": "2026-05-12T05:45:10+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2384068af4", "title": "Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers", "url": "https://www.mend.io/blog/mend-renovate-cloud-oss-plan-github-maintainer-month/", "published_at": "2026-05-07T20:28:49+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2384f10bd0", "title": "Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel List", "url": "https://www.mend.io/blog/stephanie-broyles-crn-2026-women-of-the-channel/", "published_at": "2026-05-06T19:49:52+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2385675754", "title": "PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers", "url": "https://www.mend.io/blog/phantomraven-wave-5-new-undocumented-npm-supply-chain-campaign-targets-defi-cloud-and-ai-developers/", "published_at": "2026-05-03T12:05:00+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2385a96f30", "title": "CVE-2026-31431 (Copy Fail): Linux Kernel LPE", "url": "https://www.mend.io/blog/linux-copy-fail-lpe-cve-2026-31431/", "published_at": "2026-04-30T18:32:36+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2385e99714", "title": "Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework", "url": "https://www.mend.io/blog/shai-hulud-sap-cap-supply-chain-attack-claude-code/", "published_at": "2026-04-29T16:53:59+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed23866b28e0", "title": "Best SAST Tools in 2026: Top 10 Solutions Reviewed", "url": "https://www.mend.io/blog/best-sast-tools/", "published_at": "2026-04-28T22:26:00+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed23870ed20b", "title": "Best Application Security Testing Tools: Top 10 Tools in 2026", "url": "https://www.mend.io/blog/best-application-security-testing-tools-top-10-tools-in-2025/", "published_at": "2026-04-24T00:51:00+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed238805fefd", "title": "The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets", "url": "https://www.mend.io/blog/compromised-bitwarden-cli-npm-worm-ai-poisoning/", "published_at": "2026-04-23T17:17:23+00:00" }, { "id": "01a0c536-103e-72aa-85c4-ed2388b561a1", "title": "A Poisoned Xinference Package Targets AI Inference Servers", "url": "https://www.mend.io/blog/malicious-xinference-pypi-teampcp-part-4/", "published_at": "2026-04-22T17:15:20+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a4a7a549", "title": "From Panic to Playbook: Modernizing Zero‑Day Response in AppSec", "url": "https://www.mend.io/blog/zero-day-vulnerability-response-workflow/", "published_at": "2026-04-21T18:54:22+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a556011c", "title": "What Is SAST – Static Application Security Testing", "url": "https://www.mend.io/blog/sast-static-application-security-testing/", "published_at": "2026-04-16T21:39:00+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a5a279b8", "title": "Best AI Red Teaming Tools: Top 7 Platforms and Services in 2026", "url": "https://www.mend.io/blog/best-ai-red-teaming-services-top-6-services/", "published_at": "2026-04-15T02:26:00+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a5a436cd", "title": "Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026", "url": "https://www.mend.io/blog/best-software-composition-analysis-sca-tools-top-solutions/", "published_at": "2026-04-14T22:14:00+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a6304ca4", "title": "Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSec", "url": "https://www.mend.io/blog/anthropic-project-glasswing-appsec/", "published_at": "2026-04-09T16:32:54+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a6a133c8", "title": "Container Security Without Context Is Just More Noise", "url": "https://www.mend.io/blog/docker-hardened-images-container-security/", "published_at": "2026-04-07T13:34:05+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a6c49082", "title": "AI Application Security: 6 Focus Areas and Critical Best Practices", "url": "https://www.mend.io/blog/ai-application-security/", "published_at": "2026-04-02T21:38:23+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a764a33d", "title": "Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install", "url": "https://www.mend.io/blog/poisoned-axios-npm-account-takeover-50-million-downloads-and-a-rat-that-vanishes-after-install/", "published_at": "2026-03-31T07:41:40+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a821f643", "title": "Famous Telnyx Pypi Package compromised by TeamPCP", "url": "https://www.mend.io/blog/famous-telnyx-pypi-package-compromised-by-teampcp/", "published_at": "2026-03-27T13:32:08+00:00" }, { "id": "01a0c540-2e35-71d3-ae46-5a92a88ed585", "title": "62 Generative AI Statistics to Know in 2026", "url": "https://www.mend.io/blog/generative-ai-statistics-to-know-in-2025/", "published_at": "2026-03-26T21:30:00+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb663bdbe75", "title": "TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer", "url": "https://www.mend.io/blog/teampcp-supply-chain-series-part-2/", "published_at": "2026-03-24T17:11:09+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb664a3a9d9", "title": "CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive", "url": "https://www.mend.io/blog/canisterworm-the-self-spreading-npm-attack-that-uses-a-decentralized-server-to-stay-alive/", "published_at": "2026-03-21T20:37:50+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb664b98d1e", "title": "Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident", "url": "https://www.mend.io/blog/cursor-moonshot-kimi-ai-governance-lessons/", "published_at": "2026-03-20T21:57:11+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb6653c087e", "title": "Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India", "url": "https://www.mend.io/blog/global-infrastructure-expansion-india/", "published_at": "2026-03-19T17:45:06+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb665d52acd", "title": "Introducing AI-powered Contextual Project Classification: From severity scores to business risk", "url": "https://www.mend.io/blog/introducing-contextual-project-classification/", "published_at": "2026-03-17T13:31:06+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb6668e2a3d", "title": "How to Prevent Supply Chain Attacks: A Guide to Malicious Dependencies", "url": "https://www.mend.io/blog/prevent-supply-chain-attacks-malicious-dependencies/", "published_at": "2026-03-16T14:14:00+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb666b9a9ad", "title": "7 Questions for Evaluating SCA Solutions", "url": "https://www.mend.io/blog/7-questions-to-evaluate-software-composition-analysis-solution/", "published_at": "2026-03-12T18:00:00+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb6679138a4", "title": "Introducing System Prompt Hardening: production-ready protection for system prompts", "url": "https://www.mend.io/blog/introducing-system-prompt-hardening/", "published_at": "2026-03-10T13:05:32+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb668462d5e", "title": "Best Application Security Testing Solutions: Top 12 in 2026", "url": "https://www.mend.io/blog/best-application-security-testing-solutions/", "published_at": "2026-03-05T22:53:06+00:00" }, { "id": "01a0c548-ba72-7243-8117-9cb668e0cbac", "title": "AI Compliance: 5 Key Frameworks, Challenges, and Best Practices", "url": "https://www.mend.io/blog/what-is-ai-compliance/", "published_at": "2026-03-03T23:06:58+00:00" }, { "id": "01a0c551-9105-7271-96f8-a4815f0f069f", "title": "AI Risk Management: Process, Frameworks, and 5 Mitigation Methods", "url": "https://www.mend.io/blog/ai-risk-management/", "published_at": "2026-02-26T22:09:30+00:00" }, { "id": "01a0c551-9105-7271-96f8-a4815fe243ea", "title": "Why Claude Code Security Is a Big Moment for Application Security", "url": "https://www.mend.io/blog/claude-code-security-vs-enterprise-appsec/", "published_at": "2026-02-23T21:44:12+00:00" }, { "id": "01a0c551-9105-7271-96f8-a481600e6d41", "title": "Best Software Composition Analysis Providers: Top 5 in 2026", "url": "https://www.mend.io/blog/best-software-composition-analysis-providers/", "published_at": "2026-02-19T16:19:54+00:00" }, { "id": "01a0c551-9105-7271-96f8-a481602c8bda", "title": "Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations", "url": "https://www.mend.io/blog/ai-agent-configuration-scanning/", "published_at": "2026-02-17T21:42:33+00:00" }, { "id": "01a0c551-9105-7271-96f8-a481607b5e80", "title": "AI Security Testing: Threats, Approaches, and Defenses in 2026", "url": "https://www.mend.io/blog/ai-security-testing-guide/", "published_at": "2026-02-12T15:43:00+00:00" }, { "id": "01a0c551-9105-7271-96f8-a4816150c243", "title": "Top 7 Veracode Competitors in 2026", "url": "https://www.mend.io/blog/top-veracode-alternatives/", "published_at": "2026-02-10T14:22:00+00:00" }, { "id": "01a0c551-9105-7271-96f8-a48162196214", "title": "Docker image security: how to encrypt Docker images with containerd", "url": "https://www.mend.io/blog/secure-docker-with-containerd/", "published_at": "2026-02-09T05:44:00+00:00" }, { "id": "01a0c551-9105-7271-96f8-a4816267363f", "title": "You can’t rely on open source for security — not even when AI is involved", "url": "https://www.mend.io/blog/you-cant-rely-on-open-source-for-security/", "published_at": "2026-02-06T19:24:56+00:00" }, { "id": "01a0c551-9105-7271-96f8-a48163400346", "title": "Best application security testing services: top 5 in 2026", "url": "https://www.mend.io/blog/best-application-security-testing-services-to-know/", "published_at": "2026-02-06T16:49:00+00:00" }, { "id": "01a0c551-9105-7271-96f8-a48163ec3200", "title": "Why AI Security Tools Are Different and 9 Tools to Know in 2026", "url": "https://www.mend.io/blog/why-ai-security-tools-are-different-and-9-tools/", "published_at": "2026-02-05T22:19:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bc12af91", "title": "Top Open Source Vulnerabilities In 2026", "url": "https://www.mend.io/blog/top-security-open-source-vulnerabilities/", "published_at": "2026-02-03T19:00:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bc5c25e8", "title": "npm vs Yarn in 2026: Which package manager should you choose?", "url": "https://www.mend.io/blog/npm-vs-yarn-which-should-you-choose/", "published_at": "2026-02-02T09:58:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bc8249df", "title": "Top Black Duck Alternatives in 2026", "url": "https://www.mend.io/blog/top-black-duck-alternatives/", "published_at": "2026-01-29T16:34:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bd42883f", "title": "Comprehensive Guide to DevSecOps: Principles, Process, and Technology", "url": "https://www.mend.io/blog/devsecops/", "published_at": "2026-01-29T13:00:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bd8449b0", "title": "Black Duck SAST Review: Pros, Cons and Technical Architecture", "url": "https://www.mend.io/blog/understanding-black-duck-sast/", "published_at": "2026-01-27T23:07:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bde1ae91", "title": "Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today", "url": "https://www.mend.io/blog/introducing-mend-io-ai-security-maturity-survey/", "published_at": "2026-01-20T20:43:13+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315be816ab9", "title": "Best Software Composition Analysis for Enterprise: Top 8 in 2026", "url": "https://www.mend.io/blog/best-software-composition-analysis-for-enterprise/", "published_at": "2026-01-15T23:10:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bee655dc", "title": "LLM Red Teaming: Threats, Testing Process & Best Practices", "url": "https://www.mend.io/blog/llm-red-teaming-threats-testing-best-practices/", "published_at": "2026-01-13T16:37:26+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bf24e3d7", "title": "Black Duck SCA: Pros/Cons, Architecture, and Quick Tutorial", "url": "https://www.mend.io/blog/black-duck-sca-solution-overview/", "published_at": "2026-01-08T21:47:00+00:00" }, { "id": "01a0c559-d373-72f6-bf54-e315bffacb9b", "title": "Best practices for dealing with Log4j in 2026", "url": "https://www.mend.io/blog/best-practices-for-dealing-with-log4j/", "published_at": "2026-01-05T14:09:00+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbc990825", "title": "Understanding Veracode SAST: Pros/Cons, Architecture, and Pricing", "url": "https://www.mend.io/blog/understanding-veracode-sast/", "published_at": "2026-01-02T22:56:00+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbca43bba", "title": "Veracode SCA Solution Overview: Features, Limitations, and Tutorial", "url": "https://www.mend.io/blog/veracode-sca-solution-overview/", "published_at": "2025-12-30T18:50:00+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbd01e8fb", "title": "Mend.io Leadership Update: Building on Our Momentum for the Next Phase of Growth", "url": "https://www.mend.io/blog/mend-leadership-update-the-next-phase-of-growth/", "published_at": "2025-12-22T19:13:10+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbd274ccd", "title": "Why AppSec and Network Risk Management Must Be Unified in the Modern Enterprise", "url": "https://www.mend.io/blog/why-appsec-and-network-risk-management-must-be-unified-in-the-modern-enterprise/", "published_at": "2025-12-18T16:03:31+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbd4c19a9", "title": "NPM User Flooding Registry with Fake Font Packages", "url": "https://www.mend.io/blog/npm-user-flooding-registry-with-fake-font-packages/", "published_at": "2025-12-16T18:02:56+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbdcb162c", "title": "MCP Security: 10 Key Elements to Secure and Critical Best Practices", "url": "https://www.mend.io/blog/model-context-protocol-security-explained/", "published_at": "2025-12-09T18:32:00+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbe326879", "title": "From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications", "url": "https://www.mend.io/blog/from-zero-to-rce-how-a-single-http-request-compromises-react-and-next-js-applications/", "published_at": "2025-12-04T12:11:13+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbed9558a", "title": "Mend.io + Wiz: A New Code-to-Cloud Integration for Accurate, Context-Driven Risk Prioritization", "url": "https://www.mend.io/blog/mend-and-wiz-a-new-code-to-cloud-integration/", "published_at": "2025-12-02T15:57:15+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfbfb7c2fd", "title": "Shai-Hulud: The Second Coming", "url": "https://www.mend.io/blog/shai-hulud-the-second-coming/", "published_at": "2025-11-24T13:54:56+00:00" }, { "id": "01a0c562-309c-721c-b37b-b2dfc03ea464", "title": "AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes it", "url": "https://www.mend.io/blog/introducing-the-mend-risk-reduction-dashboard/", "published_at": "2025-11-18T14:37:40+00:00" } ] posts Claim your blog
Back to mend.io
Blog · corpus.blog/blogs/mend.io/posts

mend.io

mend.io

2026

Detection scaled. The loop did not.original ↗
10 Sept 2026
Mend Renovate Enterprise: managing dependencies at agentic scaleoriginal ↗
3 Sept 2026
Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versionsoriginal ↗
29 Aug 2026
The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets rightoriginal ↗
26 Aug 2026
OWASP LLM Top 10 2026: the model will be fooled, the question is what breaksoriginal ↗
13 Aug 2026
EU AI Act: risk tiers, timeline, and compliance requirementsoriginal ↗
11 Aug 2026
That’s a wrap: Mend.io at Black Hat USA 2026original ↗
7 Aug 2026
Patch faster isn’t the answer. Patch smarter is.original ↗
4 Aug 2026
Mini Shai-Hulud Hits keyv: Trojanized Release Exfiltrates CI Secrets via GitHuboriginal ↗
4 Aug 2026
EU CRA explained: requirements, timeline, and complianceoriginal ↗
30 Jul 2026
Move faster than AI-driven risk: Inside Mend.io’s latest AI application security updateoriginal ↗
28 Jul 2026
Top 13 AI security testing solutions for dev pipelines in 2026original ↗
23 Jul 2026
199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ranoriginal ↗
22 Jul 2026
Best 6 AI security posture management platforms (AI-SPM) in 2026original ↗
21 Jul 2026
Checkmarx One: 7 features, limitations & alternativesoriginal ↗
16 Jul 2026
Independence is the moatoriginal ↗
14 Jul 2026
Dependency management tools: Key features and 6 tools to know in 2026original ↗
9 Jul 2026
The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.original ↗
8 Jul 2026
Best AI Governance Platforms for Enterprises: Top 6 in 2026original ↗
7 Jul 2026
9-Step AI Governance Implementation Strategy and the Solutions to Knoworiginal ↗
2 Jul 2026
RubyGems supply chain attack: malware used as a credential exfiltration dead droporiginal ↗
1 Jul 2026
Evaluating AI Security Posture Management Tools: 7 Key Criteriaoriginal ↗
1 Jul 2026
When the guardrails held and the attack still workedoriginal ↗
30 Jun 2026
Attestation in Cybersecurity: Types, Uses & Best Practicesoriginal ↗
25 Jun 2026
Runtime protection: Threats, technologies, and 5 best practicesoriginal ↗
23 Jun 2026
AI changed what you ship. It also changed what you have to secure.original ↗
22 Jun 2026
Best AI security posture management vendors: Top 6 in 2026original ↗
19 Jun 2026
Frontier Model Is the Wrong Meter for Continuous Securityoriginal ↗
18 Jun 2026
Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropperoriginal ↗
17 Jun 2026
Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSecoriginal ↗
16 Jun 2026
AI code review tools: Key benefits and 8 tools to know in 2026original ↗
12 Jun 2026
Best Software Composition Analysis Services: Top 8 in 2026original ↗
9 Jun 2026
AI Security Agents: Key Capabilities and 5 Critical Best Practicesoriginal ↗
4 Jun 2026
AI Guardrails in 2026: Types, Challenges, and Impact of Agentic AIoriginal ↗
2 Jun 2026
Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaignoriginal ↗
1 Jun 2026
OWASP Top 10 for LLM Applications: Risks, Impact, and Mitigationoriginal ↗
28 May 2026
Best Application Security Testing Providers: Top 8 in 2026original ↗
26 May 2026
Laravel-Lang Composer tag-rewrite Supply Chain Attackoriginal ↗
22 May 2026
Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Accountoriginal ↗
19 May 2026
Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spreadoriginal ↗
14 May 2026
Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Waveoriginal ↗
12 May 2026
Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainersoriginal ↗
7 May 2026
Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel Listoriginal ↗
6 May 2026
PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developersoriginal ↗
3 May 2026
CVE-2026-31431 (Copy Fail): Linux Kernel LPEoriginal ↗
30 Apr 2026
Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Frameworkoriginal ↗
29 Apr 2026
Best SAST Tools in 2026: Top 10 Solutions Reviewedoriginal ↗
28 Apr 2026
Best Application Security Testing Tools: Top 10 Tools in 2026original ↗
24 Apr 2026
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secretsoriginal ↗
23 Apr 2026
A Poisoned Xinference Package Targets AI Inference Serversoriginal ↗
22 Apr 2026
From Panic to Playbook: Modernizing Zero‑Day Response in AppSecoriginal ↗
21 Apr 2026
What Is SAST – Static Application Security Testingoriginal ↗
16 Apr 2026
Best AI Red Teaming Tools: Top 7 Platforms and Services in 2026original ↗
15 Apr 2026
Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026original ↗
14 Apr 2026
Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSecoriginal ↗
9 Apr 2026
Container Security Without Context Is Just More Noiseoriginal ↗
7 Apr 2026
AI Application Security: 6 Focus Areas and Critical Best Practicesoriginal ↗
2 Apr 2026
Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Installoriginal ↗
31 Mar 2026
Famous Telnyx Pypi Package compromised by TeamPCPoriginal ↗
27 Mar 2026
62 Generative AI Statistics to Know in 2026original ↗
26 Mar 2026
TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealeroriginal ↗
24 Mar 2026
CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Aliveoriginal ↗
21 Mar 2026
Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incidentoriginal ↗
20 Mar 2026
Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in Indiaoriginal ↗
19 Mar 2026
Introducing AI-powered Contextual Project Classification: From severity scores to business riskoriginal ↗
17 Mar 2026
How to Prevent Supply Chain Attacks: A Guide to Malicious Dependenciesoriginal ↗
16 Mar 2026
7 Questions for Evaluating SCA Solutionsoriginal ↗
12 Mar 2026
Introducing System Prompt Hardening: production-ready protection for system promptsoriginal ↗
10 Mar 2026
Best Application Security Testing Solutions: Top 12 in 2026original ↗
5 Mar 2026
AI Compliance: 5 Key Frameworks, Challenges, and Best Practicesoriginal ↗
3 Mar 2026
AI Risk Management: Process, Frameworks, and 5 Mitigation Methodsoriginal ↗
26 Feb 2026
Why Claude Code Security Is a Big Moment for Application Securityoriginal ↗
23 Feb 2026
Best Software Composition Analysis Providers: Top 5 in 2026original ↗
19 Feb 2026
Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurationsoriginal ↗
17 Feb 2026
AI Security Testing: Threats, Approaches, and Defenses in 2026original ↗
12 Feb 2026
Top 7 Veracode Competitors in 2026original ↗
10 Feb 2026
Docker image security: how to encrypt Docker images with containerdoriginal ↗
9 Feb 2026
You can’t rely on open source for security — not even when AI is involvedoriginal ↗
6 Feb 2026
Best application security testing services: top 5 in 2026original ↗
6 Feb 2026
Why AI Security Tools Are Different and 9 Tools to Know in 2026original ↗
5 Feb 2026
Top Open Source Vulnerabilities In 2026original ↗
3 Feb 2026
npm vs Yarn in 2026: Which package manager should you choose?original ↗
2 Feb 2026
Top Black Duck Alternatives in 2026original ↗
29 Jan 2026
Comprehensive Guide to DevSecOps: Principles, Process, and Technologyoriginal ↗
29 Jan 2026
Black Duck SAST Review: Pros, Cons and Technical Architectureoriginal ↗
27 Jan 2026
Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available todayoriginal ↗
20 Jan 2026
Best Software Composition Analysis for Enterprise: Top 8 in 2026original ↗
15 Jan 2026
LLM Red Teaming: Threats, Testing Process & Best Practicesoriginal ↗
13 Jan 2026
Black Duck SCA: Pros/Cons, Architecture, and Quick Tutorialoriginal ↗
8 Jan 2026
Best practices for dealing with Log4j in 2026original ↗
5 Jan 2026
Understanding Veracode SAST: Pros/Cons, Architecture, and Pricingoriginal ↗
2 Jan 2026

2025

Veracode SCA Solution Overview: Features, Limitations, and Tutorialoriginal ↗
30 Dec 2025
Mend.io Leadership Update: Building on Our Momentum for the Next Phase of Growthoriginal ↗
22 Dec 2025
Why AppSec and Network Risk Management Must Be Unified in the Modern Enterpriseoriginal ↗
18 Dec 2025
NPM User Flooding Registry with Fake Font Packagesoriginal ↗
16 Dec 2025
MCP Security: 10 Key Elements to Secure and Critical Best Practicesoriginal ↗
9 Dec 2025
From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applicationsoriginal ↗
4 Dec 2025
Mend.io + Wiz: A New Code-to-Cloud Integration for Accurate, Context-Driven Risk Prioritizationoriginal ↗
2 Dec 2025
Shai-Hulud: The Second Comingoriginal ↗
24 Nov 2025
AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes itoriginal ↗
18 Nov 2025
Next