• Platform
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - ai
    Mend AI Secure AI powered applications
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - dast icon 1 DAST Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - apis icon 1 API security Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - eol icon EOL support
    Platform Benefits
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - repoi icon Repo integration Scalability-icon Scalability Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - red teaming guide featured image
    AI Red Teaming Practical Guide
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - featured image
    A CISO’s Guide to Securing AI from the Start
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

You can’t rely on open source for security — not even when ai is involved
Jeff Martin Feb 6, 2026

You can’t rely on open source for security — not even when AI is involved

LATEST
Learn more

Filter & Search

Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - shrinking security debt with dependency management white paper

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Dor Hayun, Tom Abai Mar 31, 2024
Malicious Packages

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - blog 2 1

Over 100 Malicious Packages Target Popular ML PyPi Libraries

Tom Abai Mar 28, 2024
Malicious Packages

Discover the latest security threat as over 100 malicious packages target popular ML PyPi libraries. Learn about the attack methods.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - learning from history gender bias in ai

Learning From History: AI Gender Bias

Aurora Starita Mar 27, 2024
AI Models Risk

Learn about AI gender bias in large language models, how historical data impacts AI, & implications for women in health & car safety fields.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - 5 tools for managing dependency updates

What is LDAP Injection? Types, Examples and How to Prevent It

Tom Abai Mar 21, 2024
Developer

Learn what LDAP Injection is, its types, examples, and how to prevent it. Secure your applications against LDAP attacks.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - container security post

Container Security: Creating an Effective Security Program with Reachability Analysis

Ariel Shuper Mar 21, 2024
Container Security

Learn how to create an effective container security program with reachability analysis to protect your applications from vulnerabilities.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - container blog

Mend.io Launches Mend Container

Aurora Starita Mar 19, 2024
Container Security

Mend.io launches Mend Container to address security in cloud-native development, offering reachability analysis and secrets detection.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - broken nvd

Breaking: What is Going on with the NVD? Does it Affect Me?

Aurora Starita Mar 14, 2024
Open Source Security

Learn about the current issues with the National Vulnerability Database, how it affects vulnerability reporting, and how Mend SCA can help.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - what is the difference between an sca scan and a container scan

What is the difference between an SCA scan and a container scan?

Aurora Starita Feb 29, 2024
Software Composition Analysis

Learn about the difference between SCA scans and container scans, why scanning containers for vulnerabilities is important.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - how is a container scan done

How is a Container Scan Done?

Aurora Starita Feb 21, 2024
Container Security

Learn the importance of scanning container images for vulnerabilities to keep your containerized environments safe.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - secrets management vs secrets detection what you need to know

Secrets Management vs Secrets Detection: Here’s What You Need to Know

Jeff Martin Feb 14, 2024
Application Security

Learn about the importance of secrets management vs secrets detection in application security. Protect your sensitive data.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - how to use dependency injection in java tutorial with

How to Use Dependency Injection in Java: Tutorial with Examples

Itay Badichi Feb 13, 2024
Developer

Learn how to use Dependency Injection in Java with this comprehensive tutorial. Discover its benefits, types, and practical examples.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - cvss4 is here how to make the most of it

CVSS 4.0 is Here: How to Make the Most of It

Aurora Starita Feb 7, 2024
Open Source Security

Learn about the latest version of CVSS 4.0. Understand the new metrics and how to use them in your org's vulnerability remediation strategy.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - how to get the most out of sast blog post

Quality vs. Quantity: How to Get the Most Out of SAST

Sam Quakenbush Feb 1, 2024
SAST

Learn how to make the most out of Static Application Security Testing (SAST) without overwhelming developers.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - 8 ina

Idempotency: The Microservices Architect’s Shield Against Chaos

Avner Lewenstein Jan 22, 2024
Developer

Discover the power of idempotency in microservices architecture. Learn how to maintain data consistency and predictability.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - what existing security threats do ai and llms amplify post

What Existing Security Threats Do AI and LLMs Amplify? What Can We Do About Them?

Maciej Mensfeld Jan 18, 2024
AI Models Risk

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Read More Read More
Critical backdoor found in xz utils (cve-2024-3094) enables ssh compromise 1 - kubernetes in

How to Manage Secrets in Kubernetes

Ariel Shuper Jan 11, 2024
Developer

Learn how to manage secrets in Kubernetes with best practices & tools. Secure your apps & data with Kubernetes Secrets & External Secrets.

Read More Read More
Previous
1 ... 6 7 8 9 10 11 12 ... 35
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report