Mend.io Blog

Best AI security posture management vendors: Top 6 in 2026

Frontier Model Is the Wrong Meter for Continuous Security

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSec

AI code review tools: Key benefits and 8 tools to know in 2026

Best Software Composition Analysis Services: Top 8 in 2026

AI Security Agents: Key Capabilities and 5 Critical Best Practices

AI Guardrails in 2026: Types, Challenges, and Impact of Agentic AI

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

OWASP Top 10 for LLM Applications: Risks, Impact, and Mitigation

Best Application Security Testing Providers: Top 8 in 2026

Laravel-Lang Composer tag-rewrite Supply Chain Attack

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers