Mend.io Blog

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran

Maciej Mensfeld Jul 22, 2026

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Filter & Search

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - inside autogenerated rubygems squats

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Maciej Mensfeld Jul 22, 2026

Malicious Packages

199 malicious gems, zero working payloads: how Mend.io caught the campaign.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image independence is the moat

Independence is the moat

Asaf Saar Jul 14, 2026

AI Models Risk

Why the independent security layer keeps winning as AI models get better.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image dependency management tools

Dependency management tools: Key features and 6 tools to know in 2026

Tiffany Jennings Jul 9, 2026

Dependency Updates

Key features of dependency management tools and 6 notable tools to know in 2026.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image the ecb just gave banks four months to fix ai vulnerability gaps

The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.

Tiffany Jennings Jul 8, 2026

Software Supply Chain

The ECB AI cybersecurity letter gives banks until Oct 31 to act. What to know.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image ai governance platforms for enterprises 1000x650

Best AI Governance Platforms for Enterprises: Top 6 in 2026

Tiffany Jennings Jul 7, 2026

AI Models Risk

The top 6 AI governance platforms for enterprises in 2026, compared.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image ai governance implementation strategies

9-Step AI Governance Implementation Strategy and the Solutions to Know

Tiffany Jennings Jul 2, 2026

AI Models Risk

9 AI governance implementation strategies, plus 14 tools to know.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image rubygems attack 1000x650

RubyGems supply chain attack: malware used as a credential exfiltration dead drop

Maciej Mensfeld Jul 1, 2026

Malicious Packages

RubyGems supply chain attack: stolen credentials hidden in the registry.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image evaluating ai security posture management tools 1000x650

Evaluating AI Security Posture Management Tools: 7 Key Criteria

Tiffany Jennings Jul 1, 2026

AI Models Risk

Compare 7 criteria and the top AI-SPM tools.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image when the guardrails held and the attack still worked 1000x650

When the guardrails held and the attack still worked

Asaf Saar Jun 30, 2026

AI Models Risk

The guardrails held. The AI-assisted attack still worked. Here is why.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - attestation in cybersecurity blog post

Attestation in Cybersecurity: Types, Uses & Best Practices

Tiffany Jennings Jun 25, 2026

AI Models Risk

How cybersecurity attestation proves system integrity and builds digital trust.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - runtime protection

Runtime protection: Threats, technologies, and 5 best practices

Tiffany Jennings Jun 23, 2026

Application Security

What runtime protection is, key threats, and 5 best practices to apply.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image ai changed what you ship 1000x650

AI changed what you ship. It also changed what you have to secure.

Asaf Saar Jun 22, 2026

AI Models Risk

AI changed what you ship and what you have to secure.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image the wrong meter 1000x650

Frontier Model Is the Wrong Meter for Continuous Security

Asaf Saar Jun 18, 2026

AI Models Risk

Why frontier model security is too costly to run as an always-on scanner.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - @mastra

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

Alina Podoba Jun 17, 2026

Malicious Packages

@Mastra npm: 140+ Packages Compromised

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image the verification layer cannot be the model 1000x650

Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSec

Asaf Saar Jun 16, 2026

AI Models Risk

AI-generated code security needs an independent verification layer.

199 rubygems, two techniques, zero working payloads: inside a cryptomining campaign that never ran - featured image ai code review tools

AI code review tools: Key benefits and 8 tools to know in 2026

Tiffany Jennings Jun 12, 2026

AI Models Risk

What AI code review tools do, key benefits, and 8 leading tools compared.

1 2 3 4 ... 38