• Platform
    Advisory: new openssl critical security vulnerability - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    Advisory: new openssl critical security vulnerability - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Advisory: new openssl critical security vulnerability - ai
    Mend AI Secure AI powered applications
    Advisory: new openssl critical security vulnerability - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Advisory: new openssl critical security vulnerability - dast icon 1 DAST Advisory: new openssl critical security vulnerability - apis icon 1 API security Advisory: new openssl critical security vulnerability - eol icon EOL support
    Platform Benefits
    Advisory: new openssl critical security vulnerability - repoi icon Repo integration Scalability-icon Scalability Advisory: new openssl critical security vulnerability - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Advisory: new openssl critical security vulnerability - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Advisory: new openssl critical security vulnerability -
    System prompt hardening Prevent prompt injection and misuse
    Advisory: new openssl critical security vulnerability - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Advisory: new openssl critical security vulnerability - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Advisory: new openssl critical security vulnerability - red teaming guide featured image
    AI Red Teaming Practical Guide
    Advisory: new openssl critical security vulnerability - featured image
    A CISO’s Guide to Securing AI from the Start
    Advisory: new openssl critical security vulnerability - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    Advisory: new openssl critical security vulnerability - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install
Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

LATEST
Learn more

Filter & Search

Advisory: new openssl critical security vulnerability - openssl alert

Advisory: New OpenSSL Critical Security Vulnerability

Carol Hildebrand Oct 31, 2022
Open Source Security

Learn about the new OpenSSL critical security vulnerabilities CVE-2022-3786 and CVE-2022-3602. Discover their impact, and protect your systems.

Read More Read More
Advisory: new openssl critical security vulnerability - blog post

A Rash of Recent CVEs in Go

Tiffany Jennings Oct 27, 2022
Open Source Security

Discover the recent CVEs affecting Go programming language and their impact on popular applications like Docker and Kubernetes.

Read More Read More
Advisory: new openssl critical security vulnerability - modern appsec moves beyond shift left to shift smart

Modern AppSec Moves Beyond Shift Left to Shift Smart

Carol Hildebrand Oct 27, 2022
DevSecOps

Discover how modern AppSec is moving beyond just shifting left to shifting smart. Learn key principles for securing applications.

Read More Read More
Advisory: new openssl critical security vulnerability - blog rubygems vulnerabilities

To use rest_client, or to use rest-client, that is the question

Maria Korlotian Oct 18, 2022
Malicious Packages

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

Read More Read More
Advisory: new openssl critical security vulnerability - 1000x650 blog image

Vulnerability Research: Here’s How it Works at Mend.io 

Tiffany Jennings Oct 18, 2022
Open Source Security

Discover how vulnerability research works at Mend, a focus on open source vulnerabilities and different methods to protect against threats.

Read More Read More
Advisory: new openssl critical security vulnerability - the six golden rules for you to follow to improve your software and application security 2

Six Golden Rules for Software and Application Security

Tiffany Jennings Oct 4, 2022
Application Security

Learn the six golden rules for software and application security.. Stay safe during Cybersecurity Awareness Month 2022!

Read More Read More
Advisory: new openssl critical security vulnerability - npm massive dependency confusion attack

Cybercriminals targeted users of packages with a total of 1.5 billion weekly downloads on npm

Maciej Mensfeld Oct 2, 2022
Malicious Packages

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

Read More Read More
Advisory: new openssl critical security vulnerability - npm massive dependency confusion attack

Popular Cryptocurrency Exchange dYdX Has Had Its NPM Account Hacked

Maciej Mensfeld Sep 23, 2022
Malicious Packages

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Read More Read More
Advisory: new openssl critical security vulnerability - php 1

Typosquatting Malware Found in Composer Repository

Guy Bar-Gil Aug 22, 2022
Developer

Protect your PHP applications from typosquatting malware found in Composer Repository. Learn how attackers exploit vulnerabilities.

Read More Read More
Advisory: new openssl critical security vulnerability - 1000x650 2

Mend API Helps Make SBOMs Simple

Tiffany Jennings Aug 10, 2022
SBOM

Learn how Mend API simplifies the creation of SBOMs for better supply chain security. Stay ahead in DevSecOps with our automated tool.

Read More Read More
Advisory: new openssl critical security vulnerability - cloud native apps

Cloud-Native Applications and Managing Their Dependencies

Guy Bar-Gil Aug 4, 2022
Developer

Learn how to manage dependencies in cloud-native applications efficiently. Explore best practices & tools to ensure & up-to-date software

Read More Read More
Advisory: new openssl critical security vulnerability - todays security tidbit an encrypted json file containings malicious code

Today’s Security Tidbit: An Encrypted JSON File Containing Malicious Code

Tamir Ben Ari Aug 2, 2022
Malicious Packages

Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.

Read More Read More
Advisory: new openssl critical security vulnerability - how to conquer remote code execution rce in npm

How to Conquer Remote Code Execution (RCE) in npm

Maciej Mensfeld Jul 19, 2022
Malicious Packages

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Read More Read More
Advisory: new openssl critical security vulnerability - how to easily update node. Js to the latest version

How to Easily Update Node.js to the Latest Version

Alfrick Opidi Jul 19, 2022
Developer

Learn how to easily update Node.js to the latest version on macOS, Linux, & Windows.

Read More Read More
Advisory: new openssl critical security vulnerability - learn how to update docker images containers easily and quickly

Update Docker Images & Containers To Latest Version

Alfrick Opidi Jul 18, 2022
Developer

Learn how to efficiently update Docker images and containers to the latest version for improved security and performance.

Read More Read More
Advisory: new openssl critical security vulnerability - myths and facts of application testing with sast security tools blog image

Three Big Myths About Application Testing With SAST Tools

Tiffany Jennings Jul 14, 2022
SAST

Discover the truth about Application Testing with SAST. Learn about common myths, integration, and reducing false positives for security.

Read More Read More
Previous
1 ... 15 16 17 18 19 20 21 ... 36
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report