Mend.io Blog

Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Independence is the moat

Dependency management tools: Key features and 6 tools to know in 2026

The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.

Best AI Governance Platforms for Enterprises: Top 6 in 2026

9-Step AI Governance Implementation Strategy and the Solutions to Know

RubyGems supply chain attack: malware used as a credential exfiltration dead drop

Evaluating AI Security Posture Management Tools: 7 Key Criteria

When the guardrails held and the attack still worked

Attestation in Cybersecurity: Types, Uses & Best Practices

Runtime protection: Threats, technologies, and 5 best practices

AI changed what you ship. It also changed what you have to secure.

Frontier Model Is the Wrong Meter for Continuous Security

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSec