Mend.io Blog

Not all "open" AI licenses are truly open source. Learn more about the most popular licenses on Hugging Face.

There's hope yet for the world's most beleaguered vulnerability database.

Learn more about supply chain threats and where to find them.

Learn about this family of licenses that seek to limit harmful use of AI models.

We're not saying the NVD is dead but it's not looking good.

Discover the benefits of keeping your software dependencies up-to-date. Learn how to manage dependencies effectively.

Learn how the Mend.io and Sysdig integration boosts container security by combining runtime insights and vulnerability prioritization.

Learn essential strategies to secure your AI models from theft, denial of service, and other threats, covering copyright issues, risk management, and secure storage practices

Learn about the top 10 risks of open source software, beyond just CVEs. From known vulnerabilities to unapproved changes.

Learn the importance of an SBOM for enhancing application security and compliance. Explore best practices for creating and auditing SBOMs effectively.

Learn about the vulnerabilities that containers bring to your applications and how to address them to keep attackers at bay.

The National Vulnerability Database's backlog triggers a public response from cybersecurity leaders. Concerns raised, open letter to Congress

Discover the OWASP Top 10 for LLM Applications in this comprehensive guide. Learn about vulnerabilities, & prevention techniques.

Stay informed about the risks and challenges of AI models with Hugging Face. Learn how to identify and secure AI-generated code.

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Discover the latest security threat as over 100 malicious packages target popular ML PyPi libraries. Learn about the attack methods.