Mend.io Blog

The latest news and insights on securing the software supply chain

Adversaries Are Using Automation. Software Vendors Must Catch Up

Adversaries Are Using Automation. Software Vendors Must Catch Up

AJ Starita, September 21, 2023
Attackers are using automation to escalate their attacks. Here’s why and how you can use automation to defend your apps, software and codebase.
4 minute read
Communicating the Value of Your Company With SBOMs

Communicating the Value of Your Company With SBOMs

AJ Starita, September 19, 2023
An SBOM is more than just a box to tick, it’s an opportunity to build trust with your customers. Here’s why and how to do that.
5 minute read
Software Supply Chain Security: The Basics and Four Critical Best Practices

Software Supply Chain Security: The Basics and Four Critical Best Practices

AJ Starita, September 14, 2023
Learn about supply chain security, supply chain attacks, and how to protect your organization against this severe threat.
12 minute read

All Posts

Select Filters

Clear All Filters
  • Application Security
  • DevSecOps
  • License Compliance
  • Malicious Packages
  • Open Source Audit
  • Supply Chain Security
How Software Supply Chain Security Regulation Will Develop, and What Will It Look Like?
How Software Supply Chain Security Regulation Will Develop, and What Will It Look Like?
Sam Quakenbush, September 12, 2023
5 minute read
Why Legal Regulation Shifts Responsibility for Software Supply Chain Security to Vendors
Why Legal Regulation Shifts Responsibility for Software Supply Chain Security to Vendors
Sam Quakenbush, September 7, 2023
6 minute read
Are You Protected from the 12 Most Exploited Vulnerabilities?
Are You Protected from the 12 Most Exploited Vulnerabilities?
Adam Murray, September 5, 2023
6 minute read
Tips and Tools for Open Source Compliance
Tips and Tools for Open Source Compliance
AJ Starita, August 31, 2023
11 minute read
Eight Considerations for Thwarting Malicious Packages
Eight Considerations for Thwarting Malicious Packages
Rhys Arkins, August 29, 2023
8 minute read
What You Can Do to Stop Software Supply Chain Attacks
What You Can Do to Stop Software Supply Chain Attacks
Jeff Martin, August 24, 2023
5 minute read
Five Key Application Security Best Practices and Benefits for Maintaining Up-to-Date Dependencies
Five Key Application Security Best Practices and Benefits for Maintaining Up-to-Date Dependencies
Rhys Arkins, August 22, 2023
4 minute read
How Software Supply Chain Attacks Work, and How to Assess Your Software Supply Chain Security
How Software Supply Chain Attacks Work, and How to Assess Your Software Supply Chain Security
Jeff Martin, August 17, 2023
4 minute read
Seven DevSecOps Best Practices: Challenges and How to Address Them
Seven DevSecOps Best Practices: Challenges and How to Address Them
Rhys Arkins, August 15, 2023
7 minute read

Editor’s Picks

Docker Container Security: Challenges and Best Practices
Adam Murray, February 8, 2023
Docker is a complicated beast, and there is no simple trick you can use to maintain Docker container security. We offer a set of best practices to help you.
Top Open Source Licenses Explained
Adam Murray, January 19, 2023
Increase your knowledge of open source licenses by learning what the main types are, how they work, and how they differ.