Mend.io Blog

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

LATEST
Learn more

Filter & Search

Nvd’s backlog triggers public response from cybersec leaders - nvd backlog triggers public response from cybersec leaders

NVD’s Backlog Triggers Public Response from Cybersec Leaders

The National Vulnerability Database's backlog triggers a public response from cybersecurity leaders. Concerns raised, open letter to Congress

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - owasp top 10 llm application vulnerabilities

OWASP Top 10 for LLM Applications: A Quick Guide

Discover the OWASP Top 10 for LLM Applications in this comprehensive guide. Learn about vulnerabilities, & prevention techniques.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - hugging face blog

What You Need to Know About Hugging Face

Stay informed about the risks and challenges of AI models with Hugging Face. Learn how to identify and secure AI-generated code.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - shrinking security debt with dependency management white paper

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - blog 2 1

Over 100 Malicious Packages Target Popular ML PyPi Libraries

Discover the latest security threat as over 100 malicious packages target popular ML PyPi libraries. Learn about the attack methods.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - learning from history gender bias in ai

Learning From History: AI Gender Bias

Learn about AI gender bias in large language models, how historical data impacts AI, & implications for women in health & car safety fields.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - 5 tools for managing dependency updates

What is LDAP Injection? Types, Examples and How to Prevent It

Learn what LDAP Injection is, its types, examples, and how to prevent it. Secure your applications against LDAP attacks.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - container security post

Container Security: Creating an Effective Security Program with Reachability Analysis

Learn how to create an effective container security program with reachability analysis to protect your applications from vulnerabilities.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - container blog

Mend.io Launches Mend Container

Mend.io launches Mend Container to address security in cloud-native development, offering reachability analysis and secrets detection.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - broken nvd

Breaking: What is Going on with the NVD? Does it Affect Me?

Learn about the current issues with the National Vulnerability Database, how it affects vulnerability reporting, and how Mend SCA can help.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - what is the difference between an sca scan and a container scan

What is the difference between an SCA scan and a container scan?

Learn about the difference between SCA scans and container scans, why scanning containers for vulnerabilities is important.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - how is a container scan done

How is a Container Scan Done?

Learn the importance of scanning container images for vulnerabilities to keep your containerized environments safe.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - secrets management vs secrets detection what you need to know

Secrets Management vs Secrets Detection: Here’s What You Need to Know

Learn about the importance of secrets management vs secrets detection in application security. Protect your sensitive data.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - how to use dependency injection in java tutorial with

How to Use Dependency Injection in Java: Tutorial with Examples

Learn how to use Dependency Injection in Java with this comprehensive tutorial. Discover its benefits, types, and practical examples.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - cvss4 is here how to make the most of it

CVSS 4.0 is Here: How to Make the Most of It

Learn about the latest version of CVSS 4.0. Understand the new metrics and how to use them in your org's vulnerability remediation strategy.

Read More Read More
Nvd’s backlog triggers public response from cybersec leaders - how to get the most out of sast blog post

Quality vs. Quantity: How to Get the Most Out of SAST

Learn how to make the most out of Static Application Security Testing (SAST) without overwhelming developers.

Read More Read More

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.