Mend API Helps Make SBOMs Simple
Learn how Mend API simplifies the creation of SBOMs for better supply chain security. Stay ahead in DevSecOps with our automated tool.
Choose Your Type
Choose Your Topic
Our Latest Content
Today’s Security Tidbit: An Encrypted JSON File Containing Malicious Code
Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.
How attackers leverage example apps/reproduction scripts to attack OSS maintainers
Learn how attackers leverage example apps and reproduction scripts to target open source software maintainers.
How to Conquer Remote Code Execution (RCE) in npm
Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.
Three Big Myths About Application Testing With SAST Tools
Discover the truth about Application Testing with SAST. Learn about common myths, integration, and reducing false positives for security.
Closing the Gap: Reducing Enterprise AppSec Risks Without Disrupting Deadlines
Learn how to reduce enterprise application security risks without disrupting deadlines. Join in a discussion on closing the gap.
A Brief Guide to Cloud-Native Applications, Technology, and Security
A comprehensive guide to cloud-native applications, technology, and security. Learn about containers, microservices, CI/CD, and more.
Attacker Floods npm With Crypto-Mining Packages that Mine Monero When Installed with Default Configuration
Attacker floods npm with crypto-mining packages that mine Monero with default configuration. Learn about supply chain security and more.
Statement from Mend on the U.S. Supreme Court Decision
Mend stands with employees after the U.S. Supreme Court abortion ruling, providing support for access to care for medical procedures.
Pride 2022: Supporting LGBTQ+ in Tech
Celebrate Pride 2022 with Mend as we support LGBTQ+ in tech. Hear from employees on their experiences and advice for the tech workplace.
Six Steps to Achieve Zero Trust in Application Security
Discover six key steps to achieve zero trust in application security. Learn how to protect your organization from cyberattacks.
Single Author Uploaded 168 Packages to npm as Part of a Massive Dependency Confusion Attack
Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.
3 Critical Best Practices of Software Supply Chain Security
Learn about the 3 critical best practices of software supply chain security to protect your organization from malicious packages.
3 New GitHub Features to Reinforce Your Code, Repo, and Dependency Security
Learn about the latest GitHub features to enhance your code security and dependency management. Stay ahead of vulnerabilities.
A Weaponized npm Package ’@core-pas/cyb-core’ Proclaimed Pentesting Related
Discover how a weaponized npm package was detected and removed, how it targeting sensitive information in Windows and UNIX systems.
RSA 2022–What a Week!
Mend team recaps their week at RSA 2022 in San Francisco, discussing the importance of automating application security remediation and trends
Cloud Security Architecture: A Practical Guide
Learn about Cloud Security Architecture. Understand the importance, core principles, and threats to secure your cloud environment effectively.
Introducing Mend Supply Chain Defender Integration with JFrog Artifactory
Discover how Mend Supply Chain Defender integrates with JFrog Artifactory to block malicious software threats in your code base.
The Era of Automated SAST has Begun
Discover the Era of Automated SAST with Mend.io's Application Security Platform. Automated remediation, fast scanning, and language support.
Mend Epitomizes RSA 2022 Theme, “Transform”
Learn how Mend is bringing RSA 2022’s “transform” theme to life with its own transformation, what that means for customers, and what we’re anticipating from the conference.
From WhiteSource to Mend—A Rebrand Journey
From WhiteSource to Mend—A Rebrand Journey. Follow our evolution from open source to all code application security.
WhiteSource is Now Mend: You Code, We Cure
Mend, formerly WhiteSource, focuses on automating application security with a remediation-first approach for open source and custom code.
Vulnerability Remediation: A Practical Guide
Practical guide to vulnerability remediation for developers & security teams. Learn how to detect, prioritize, fix, & monitor vulnerabilities.
Impact Analysis: CVE-2022-29218, Allows Unauthorized Takeover of New Gem Versions via Cache Poisoning
Learn about the impact analysis of CVE-2022-29218, a vulnerability allowing unauthorized takeover of new Gem versions via cache poisoning.
New Typosquating Attack on npm Package ’colors’ Using Cross language Technique Explained
Discover the latest typosquatting attack on the npm package 'colors' using a cross-language technique.
Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover
Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more
What is the NIST Supply Chain Risk Management Program?
Discover the NIST Supply Chain Risk Management Program.. Learn how to manage cybersecurity risks in digital supply chains effectively.
Plan and Protect: A Modern Plan for Open-Source Security
Learn how to protect your open-source software with a modern security plan. Join the WhiteSource and Microsoft webinar.
Why Vulnerability Management Must Go Beyond CVSS to Priority Scoring
Learn why vulnerability management must go beyond CVSS to priority scoring for better open source security and remediation prioritization.
AWS Targeted by a Package Backfill Attack
Discover how AWS was targeted by a malicious package backfill attack, the methods used by attackers, and how to protect against such attacks.
5 Vulnerability Assessment Scanning Tools: 5 Solutions Compared
Discover the top 5 vulnerability assessment scanning tools and learn how to prioritize and remediate vulnerabilities to secure your org.
Cybernews/ Mend: It’s No Longer a Matter of ‘If’, but ‘When’ an Organization Will Be Targeted by Threat Actors
Mend.io specializes in AppSec to protect orgs from cyber threats. Learn about their journey, products, and solutions to combat new threats.
Threat Actor Deploys Malicious Packages Using Hex Encoding and Delayed Execution
Discover how threat actors are using hex encoding and delayed execution to deploy malicious packages. Learn how to protect your applications.
How SAST and SCA together make your security stronger?
Learn how combining Static Application Security Testing (SAST) and Software Composition Analysis (SCA) strengthens your security.
Mend Support for Ukrainian War Refugees
Join Mend in supporting Ukrainian war refugees with volunteer efforts in Poland. Hear firsthand experiences from Mend team members.
Get the Response to Spring4Shell Right: Best Practices for Immediate Remediation
Learn best practices for immediate remediation of the Spring4Shell vulnerability, including detection, and prioritization.