Mend.io Blog

Discover how Mend partners with AWS to integrate dependency management into cloud services, reducing vulnerabilities.

Discover Mend SCA's new integration with Bitbucket Cloud for seamless open source risk detection and remediation. Learn more now!

Learn how to improve your zero-day readiness in JavaScript to protect against data breaches and cyber attacks.

Learn why your DevOps platform needs a security partner to safeguard your software. Mend.io provides application security and DevSecOps.

Get to know all about DevSecOps and the main tools and practices that organizations should adopt in order to implement a DevSecOps pipeline.

Learn how modern Application Security Programs leverage automation to combat cyber threats, improve efficiency, and reduce costs.

Discover the top three user priorities for Software Composition Analysis including application security, DevSecOps, and license compliance.

Learn about the new OpenSSL critical security vulnerabilities CVE-2022-3786 and CVE-2022-3602. Discover their impact, and protect your systems.

Discover the recent CVEs affecting Go programming language and their impact on popular applications like Docker and Kubernetes.

Discover how modern AppSec is moving beyond just shifting left to shifting smart. Learn key principles for securing applications.

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

Discover how vulnerability research works at Mend, a focus on open source vulnerabilities and different methods to protect against threats.

Learn the six golden rules for software and application security.. Stay safe during Cybersecurity Awareness Month 2022!

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Protect your PHP applications from typosquatting malware found in Composer Repository. Learn how attackers exploit vulnerabilities.