Mend.io Blog

Famous Telnyx Pypi Package compromised by TeamPCP

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Introducing System Prompt Hardening: production-ready protection for system prompts

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

Why Claude Code Security Is a Big Moment for Application Security

Best Software Composition Analysis Providers: Top 5 in 2026

Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations

AI Security Testing: Threats, Approaches, and Defenses in 2026

You can’t rely on open source for security — not even when AI is involved

Top Open Source Vulnerabilities In 2026

Understanding Black Duck SAST: Pros/Cons and Technical Architecture