Mend.io Blog

184 open source organizations now have the Renovate Community (OSS) plan

What the NIST SSDF requires and how to implement its four practice groups.

How security teams turn AI governance into an operational practice.

Findings got cheap. Verified closure did not. That gap is the AppSec problem.

How Mend Renovate Enterprise keeps dependency updates flowing at agentic scale.

An npm supply chain attack published ten malicious versions

Nine solved supply chain risks, one new gap: the OWASP Agentic Skills Top 10.

The 2026 OWASP LLM Top 10 shifts the job from prevention to containment.

Risk tiers, deadlines, and compliance steps under the EU AI Act.

Mend.io at Black Hat USA 2026: keynote, podcasts, awards, and a hit booth game.

AI killed the patch window. Smarter patch management is how teams keep up.

Trojanized keyv@6.0.0 exfiltrates CI secrets through GitHub’s own API.

What the EU CRA requires, key deadlines, penalties, and how to comply.

AI agent discovery, runtime guardrails, agentic triage, and zero-day speed.

Compare the top AI security testing solutions for dev pipelines.

199 malicious gems, zero working payloads: how Mend.io caught the campaign.