Filter & Search

Guide to the rail family of ai licenses

Responsible AI Licenses (RAIL): Here’s What You Need to Know

Learn about this family of licenses that seek to limit harmful use of AI models.

Read More Read More
Broken nvd 1

NVD Update: More Problems, More Letters, Some Questions Answered

We’re not saying the NVD is dead but it’s not looking good.

Read More Read More
Getting started with dependency management

Getting Started with Software Dependency Management

Discover the benefits of keeping your software dependencies up-to-date. Learn how to manage dependencies effectively.

Read More Read More
Mend and sysdig launch joint solution for container security

Mend.io and Sysdig Launch Joint Solution for Container Security

Learn how the Mend.io and Sysdig integration boosts container security by combining runtime insights and vulnerability prioritization.

Read More Read More
How do i protect my ai model blog

How Do I Protect My AI Model?

Learn essential strategies to secure your AI models from theft, denial of service, and other threats, covering copyright issues, risk management, and secure storage practices

Read More Read More
Owasp oss risk top ten blog

Quick Guide to the OWASP OSS Risk Top 10

Learn about the top 10 risks of open source software, beyond just CVEs. From known vulnerabilities to unapproved changes.

Read More Read More
Large blog

Why an SBOM Audit is Vital to Application Security and Compliance

Learn the importance of an SBOM for enhancing application security and compliance. Explore best practices for creating and auditing SBOMs effectively.

Read More Read More
What makes containers vulnerable

What Makes Containers Vulnerable?

Learn about the vulnerabilities that containers bring to your applications and how to address them to keep attackers at bay.

Read More Read More
Nvd backlog triggers public response from cybersec leaders

NVD’s Backlog Triggers Public Response from Cybersec Leaders

The National Vulnerability Database’s backlog triggers a public response from cybersecurity leaders. Concerns raised, open letter to Congress

Read More Read More
Hugging face blog

What You Need to Know About Hugging Face

Stay informed about the risks and challenges of AI models with Hugging Face. Learn how to identify and secure AI-generated code.

Read More Read More
Shrinking security debt with dependency management white paper

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Read More Read More
Blog 2 1

Over 100 Malicious Packages Target Popular ML PyPi Libraries

Discover the latest security threat as over 100 malicious packages target popular ML PyPi libraries. Learn about the attack methods.

Read More Read More
Learning from history gender bias in ai

Learning From History: AI Gender Bias

Learn about AI gender bias in large language models, how historical data impacts AI, & implications for women in health & car safety fields.

Read More Read More
5 tools for managing dependency updates

What is LDAP Injection? Types, Examples and How to Prevent It

Learn what LDAP Injection is, its types, examples, and how to prevent it. Secure your applications against LDAP attacks.

Read More Read More
Container security post

Container Security: Creating an Effective Security Program with Reachability Analysis

Learn how to create an effective container security program with reachability analysis to protect your applications from vulnerabilities.

Read More Read More
Container blog

Mend.io Launches Mend Container

Mend.io launches Mend Container.

Read More Read More

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.