Mend.io Blog

The latest news and insights on securing the software supply chain

Cybersecurity Awareness Month 2023: Five Reasons You Need Automatic Software Updates for Your Application Security.

Cybersecurity Awareness Month 2023: Five Reasons You Need Automatic Software Updates for Your Application Security.

Adam Murray, October 3, 2023
To mark Cybersecurity Awareness Month 2023, discover five key reasons why automated software updates are so vital for your application security.
6 minute read
Vulnerability Assessment: A Guide

Vulnerability Assessment: A Guide

Adam Murray, September 29, 2023
Performing a vulnerability assessment is the first step towards securing your organization. We breakdown what you need to know and where to start.
10 minute read
What Role Should Dependency Management Play as the Regulation of the Software Supply Chain Escalates?

What Role Should Dependency Management Play as the Regulation of the Software Supply Chain Escalates?

Adam Murray, September 26, 2023
Discover why and how dependency management has become more significant as regulation and governance of the software supply chain escalates.
6 minute read

All Posts

Select Filters

Clear All Filters
  • Application Security
  • DevSecOps
  • License Compliance
  • Malicious Packages
  • Open Source Audit
  • Supply Chain Security
Adversaries Are Using Automation. Software Vendors Must Catch Up
Adversaries Are Using Automation. Software Vendors Must Catch Up
AJ Starita, September 21, 2023
4 minute read
Communicating the Value of Your Company With SBOMs
Communicating the Value of Your Company With SBOMs
AJ Starita, September 19, 2023
5 minute read
Software Supply Chain Security: The Basics and Four Critical Best Practices
Software Supply Chain Security: The Basics and Four Critical Best Practices
AJ Starita, September 14, 2023
12 minute read
How Software Supply Chain Security Regulation Will Develop, and What Will It Look Like?
How Software Supply Chain Security Regulation Will Develop, and What Will It Look Like?
Sam Quakenbush, September 12, 2023
5 minute read
Why Legal Regulation Shifts Responsibility for Software Supply Chain Security to Vendors
Why Legal Regulation Shifts Responsibility for Software Supply Chain Security to Vendors
Sam Quakenbush, September 7, 2023
6 minute read
Are You Protected from the 12 Most Exploited Vulnerabilities?
Are You Protected from the 12 Most Exploited Vulnerabilities?
Adam Murray, September 5, 2023
6 minute read
Tips and Tools for Open Source Compliance
Tips and Tools for Open Source Compliance
AJ Starita, August 31, 2023
11 minute read
Eight Considerations for Thwarting Malicious Packages
Eight Considerations for Thwarting Malicious Packages
Rhys Arkins, August 29, 2023
8 minute read
What You Can Do to Stop Software Supply Chain Attacks
What You Can Do to Stop Software Supply Chain Attacks
Jeff Martin, August 24, 2023
5 minute read

Editor’s Picks

Docker Container Security: Challenges and Best Practices
Adam Murray, February 8, 2023
Docker is a complicated beast, and there is no simple trick you can use to maintain Docker container security. We offer a set of best practices to help you.
Top Open Source Licenses Explained
Adam Murray, January 19, 2023
Increase your knowledge of open source licenses by learning what the main types are, how they work, and how they differ.