Secure how AI behaves, not just what it’s built from.
Cut through the noise to reduce real application risk.
Automated dependency updates, running on millions of repos.
Extend Mend AppSec to running apps, APIs, and aging dependencies.
Mend SCA now supports Bun, with reachability built in
Mend SCA scans bun.lock and bun.lockb with reachability analysis built in.
PHP2Shell is in CISA KEV: why runtime visibility matters
PHP2Shell is in CISA KEV. Who is still exposed, and how to find every build.
PHP2Shell: the fix is a runtime upgrade, not a code change
Two critical PHP RCE flaws: who is exposed and how to find every runtime.
Compromised LiteLLM 1.107.0 on PyPI Ships a Credential Stealer and Code Loader
LiteLLM 1.107.0 shipped a credential stealer and remote code loader on PyPI.
Your AI agent is sandboxed. Its data still needs guardrails.
Docker Sandboxes contains your agent. Mend AI Guardrails checks what it sends.
Best scalable agent security posture management solutions: Top 12 in 2026
12 tools that discover, secure, and govern AI agents at scale.
Mend.io upgrades 184 open source organizations to the Renovate Community (OSS) plan
184 open source organizations now have the Renovate Community (OSS) plan
NIST SSDF: 4 core practices for secure software development
What the NIST SSDF requires and how to implement its four practice groups.
What Is AI Governance? A Practical Framework for Security Teams
How security teams turn AI governance into an operational practice.
How to choose AI governance software in 2026: Top 7 criteria
Seven criteria for choosing AI governance software, with eight tools compared.
Detection scaled. The loop did not.
Findings got cheap. Verified closure did not. That gap is the AppSec problem.
Dependency management tools: Key features and 6 tools to know in 2026
Key features of dependency management tools and 6 notable tools to know in 2026.
Mend Renovate Enterprise: managing dependencies at agentic scale
How Mend Renovate Enterprise keeps dependency updates flowing at agentic scale.
Best 6 AI security posture management platforms (AI-SPM) in 2026
Compare the top AI security posture management platforms (AI-SPM) for 2026.
Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions
An npm supply chain attack published ten malicious versions
Checkmarx SCA: key features, limitations, and six alternatives
Checkmarx SCA features, how scans run, limitations, and six alternatives.
Never miss a post. Opt-out at any time.
You’re all set to receive our latest posts.
