• Platform
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - ai
    Mend AI Secure AI powered applications
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - dast icon 1 DAST The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - apis icon 1 API security The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - eol icon EOL support
    Platform Benefits
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - repoi icon Repo integration Scalability-icon Scalability The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase -
    System prompt hardening Prevent prompt injection and misuse
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - red teaming guide featured image
    AI Red Teaming Practical Guide
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - featured image
    A CISO’s Guide to Securing AI from the Start
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install
Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

LATEST
Learn more

Filter & Search

The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - shadow mcp blog graphic

The Growing Challenge of Shadow MCP: Unauthorized AI Connectivity in Your Codebase

Waseem Hamshawi Jun 10, 2025
AI Models Risk

MCP adoption is surging across industries, fundamentally reshaping how systems connect to AI models.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - application security — the complete guide

Security Testing in 2025: Testing Apps, AI, Cloud Native, and More

Tiffany Jennings Jun 9, 2025
Application Security

Learn about key trends in modern security and the OWASP Top 10.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - top 10 questions about the gpl license answered post

The Top 10 Questions about the GPL License – Answered!

Tiffany Jennings Jun 8, 2025
Open Source Licenses

Learn about the GPL License and its compliance requirements.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - the 2021 owasp top 10 post

What Are OWASP Top 10 Threats & When Will the Top 10 Be Updated?

Tiffany Jennings May 29, 2025
Open Source Security

Stay updated on the latest in application security with the OWASP Top 10 vulnerabilities.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - red teaming blog graphic

Why AI Red Teaming Is the Next Must-Have in Enterprise Security

Tiffany Jennings May 27, 2025
AI Models Risk

Learn why red teaming is key to securing today’s enterprise AI systems.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - ast security scanning blog post

Application Security Testing: Security Scanning and Runtime Protection Tools

Tiffany Jennings May 20, 2025
Application Security Testing

Learn about the differences between security scanning and runtime protection in application security testing. Explore tools and tech.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - blog image red teaming providers 1

Best AI Red Teaming Providers: Top 5 Vendors in 2025

Bar-El Tayouri May 16, 2025
AI Models Risk

AI Red Teaming providers are specialized companies that simulate adversarial attacks on AI systems to uncover vulnerabilities, biases, and harmful behaviors before these systems are deployed.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - blog owasp dependency check

OWASP Dependency Check: How Does It Work?

Tiffany Jennings May 14, 2025
Open Source Security

Learn how OWASP Dependency Check helps secure open source components.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - blog image top ten tips to choose a great sast tool@2x

Top Ten Tips to Choose a Great SAST Tool

Jeff Martin, Tiffany Jennings May 7, 2025
SAST

The top ten tips for choosing a SAST tool for application security. Integration, automation, and scalability are key factors to consider.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - dynamic application security testing dast basics 1

Dynamic Application Security Testing: DAST Basics

Tiffany Jennings May 5, 2025
Application Security Testing

Learn about dynamic application security testing (DAST).

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - best ai red teaming companies top 10 providers in 2025@2x

Best AI Red Teaming Companies: Top 10 Providers in 2025

Tiffany Jennings May 1, 2025
AI Models Risk

AI Red Teaming companies help software and security teams to better understand how their AI application behaves under adversarial attacks.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - mend microsoft partnership post

Introducing Mend’s Integration with Microsoft Defender for Cloud

Tiffany Jennings Apr 29, 2025
Open Source Security

Mend.io now integrates with Microsoft Defender for Cloud, bringing intelligent open source security insights into cloud workflows.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - blog image red teaming solutions 1

Top AI Red Teaming Solutions and How to Choose

Bar-El Tayouri Apr 25, 2025
AI Models Risk

Learn what AI red teaming solutions solve, how they work, and how to choose the right fit.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - mend and herodevs partnership

Mend.io & HeroDevs Partnership: Eliminate Risks in Deprecated Package

Tiffany Jennings Apr 22, 2025
Open Source Security

Announcing an exclusive partnership between Mend.io and HeroDevs to provide support for deprecated packages.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - vector and embedding weakness blog post

Vector and Embedding Weaknesses in AI Systems

Bar-El Tayouri Apr 17, 2025
AI Models Risk

Learn how to secure embeddings against poisoning, leakage, and inversion attacks.

Read More Read More
The growing challenge of shadow mcp: unauthorized ai connectivity in your codebase - mitre cve program uncertainty blog

MITRE CVE Program Uncertainty: Mend.io’s commitment to uninterrupted vulnerability protection

Tiffany Jennings Apr 16, 2025
Application Security

Mend.io continues to deliver uninterrupted, multi-source vulnerability protection.

Read More Read More
Previous
1 ... 3 4 5 6 7 8 9 ... 36
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report