Mend.io Blog

Detection scaled. The loop did not.

Asaf Saar Sep 10, 2026

Detection scaled. The loop did not.

Filter & Search

Detection scaled. The loop did not. - featured image detection scaled the loop did not

Detection scaled. The loop did not.

Asaf Saar Sep 10, 2026

Application Security

Findings got cheap. Verified closure did not. That gap is the AppSec problem.

Detection scaled. The loop did not. - featured image managing dependencies at agentic scale

Mend Renovate Enterprise: managing dependencies at agentic scale

Iris Kaminer Sep 3, 2026

Dependency Updates

How Mend Renovate Enterprise keeps dependency updates flowing at agentic scale.

Detection scaled. The loop did not. - 10 malicious npm versions

Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions

Alina Podoba Aug 29, 2026

Malicious Packages

An npm supply chain attack published ten malicious versions

Detection scaled. The loop did not. - featured image skill layer dependency problem

The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right

Asaf Saar Aug 26, 2026

AI Models Risk

Nine solved supply chain risks, one new gap: the OWASP Agentic Skills Top 10.

Detection scaled. The loop did not. - featured image owasp llm top 10 2026

OWASP LLM Top 10 2026: the model will be fooled, the question is what breaks

Asaf Saar Aug 13, 2026

AI Models Risk

The 2026 OWASP LLM Top 10 shifts the job from prevention to containment.

Detection scaled. The loop did not. - featured image eu ai act

EU AI Act: risk tiers, timeline, and compliance requirements

Tiffany Jennings Aug 11, 2026

AI Models Risk

Risk tiers, deadlines, and compliance steps under the EU AI Act.

Detection scaled. The loop did not. - featured image black hat usa 2026

That’s a wrap: Mend.io at Black Hat USA 2026

Stephanie Broyles Aug 7, 2026

Inside Mend.io

Mend.io at Black Hat USA 2026: keynote, podcasts, awards, and a hit booth game.

Detection scaled. The loop did not. - featured image patch smarter

Patch faster isn’t the answer. Patch smarter is.

Shannon Davis Aug 4, 2026

Dependency Updates

AI killed the patch window. Smarter patch management is how teams keep up.

Detection scaled. The loop did not. - mini shai hulud hits keyv

Mini Shai-Hulud Hits keyv: Trojanized Release Exfiltrates CI Secrets via GitHub

Alina Podoba Aug 4, 2026

Malicious Packages

Trojanized keyv@6.0.0 exfiltrates CI secrets through GitHub’s own API.

Detection scaled. The loop did not. - featured image the eu cyber resilience act

EU CRA explained: requirements, timeline, and compliance

Tiffany Jennings Jul 30, 2026

Application Security

What the EU CRA requires, key deadlines, penalties, and how to comply.

Detection scaled. The loop did not. - featured image move faster than ai driven risk 1000x650

Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

Asaf Saar Jul 28, 2026

AI Models Risk

AI agent discovery, runtime guardrails, agentic triage, and zero-day speed.

Detection scaled. The loop did not. - featured image ai security testing solutions for dev pipelines

Top 13 AI security testing solutions for dev pipelines in 2026

Tiffany Jennings Jul 23, 2026

Application Security Testing

Compare the top AI security testing solutions for dev pipelines.

Detection scaled. The loop did not. - inside autogenerated rubygems squats

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Maciej Mensfeld Jul 22, 2026

Malicious Packages

199 malicious gems, zero working payloads: how Mend.io caught the campaign.

Detection scaled. The loop did not. - featured image ai security posture management platforms 1000x650

Best 6 AI security posture management platforms (AI-SPM) in 2026

Tiffany Jennings Jul 21, 2026

AI Models Risk

Compare the top AI security posture management platforms (AI-SPM) for 2026.

Detection scaled. The loop did not. - featured image checkmarx one

Checkmarx One: 7 features, limitations & alternatives

Tiffany Jennings Jul 16, 2026

SAST

Checkmarx One features, limitations, and the top alternatives to consider.

Detection scaled. The loop did not. - featured image independence is the moat

Independence is the moat

Asaf Saar Jul 14, 2026

AI Models Risk

Why the independent security layer keeps winning as AI models get better.

1 2 3 4 … 38