Mend.io Blog

Learn about the Spring4Shell Zero-Day Vulnerability CVE-2022-22965 with information, updates, mitigation guidance, and more.

Learn how to set benchmarks for false positives in SAST tools to enhance application security and improve developer efficiency.

Address SAST false positives in your application security testing.

Understand the types of Ruby supply chain attacks. Learn the best practices for preventing supply chain security risks in your Ruby projects.

Learn how to implement software supply chain risk management to safeguard your critical assets. Discover best practices, & more.

Discover the 7 key differences between SAST and SCA tools in application security.

Learn about our innovative approach to detecting and remediating custom code vulnerabilities for a more secure future.

Learn about the five critical facts about npm package security, including how attackers exploit trust, default behaviors, and dependency hell.

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

CVE-2021-44142 allows bad actors to execute arbitrary code as root on Samba. Learn about the vulnerability, exploit, and how to fix it.

Dive into CVE-2021-4034 PwnKit vulnerability: learn how a simple out-of-bounds access in Linux's pkexec can lead to root system privileges.

Open source licenses in 2022. Permissive licenses are on the rise, while copyleft licenses like GPL are decreasing in popularity.

Discover how DevSecOps integrates with Agile to enhance security and speed in software development. Learn best practices & more.

Learn about CVE-2021-44832 in Log4j and how to protect your applications. Stay informed about the latest cybersecurity vulnerabilities.

Learn how to fix the Log4j vulnerability with Mend Renovate and Remediate. Keep your applications secure with automated dependency management.

Learn about the Log4Shell vulnerability in Ruby applications using Log4j jars in JRuby, exposing them to potential exploits.