Maciej Mensfeld Principal Product Architect

199 malicious gems, zero working payloads: how Mend.io caught the campaign.

RubyGems supply chain attack: stolen credentials hidden in the registry.

How Mend.io caught a coordinated RubyGems attack and what it teaches us.

Explore LLMs in cybersecurity research: analyzing vulnerability data, sifting through CVE information, and enhancing digital safety.

Discover how to harness the power of AI while mitigating risks in this practical guide webinar with Chris Lindsey and Maciej Mensfeld.

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Understand the types of Ruby supply chain attacks. Learn the best practices for preventing supply chain security risks in your Ruby projects.

Learn about the five critical facts about npm package security, including how attackers exploit trust, default behaviors, and dependency hell.

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Learn how to secure your package manager’s lockfiles to protect your application from supply chain risks and ensure version consistency.