Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Agentic Remediation vs. Manual Patching: What Changes When AI Fixes Vulnerabilities Open Source 2026-07-31 1,047 --
Top Vulnerability Remediation Tools for AppSec Teams in 2026 DevSecOps Tools 2026-07-31 2,540 --
How AI Vulnerability Remediation Actually Works in 2026 AI/ML 2026-07-31 1,747 --
What Is Agentic Remediation? The Complete Guide -- 2026-07-31 1,628 --
Automated Dependency Updates Done Right: A Security-First Guide Open Source 2026-07-31 1,603 --
Upgrade Impact Analysis: Patch Without Breaking Your Build Open Source 2026-07-31 1,398 --
What Is Reachability Analysis and Why Does It Matter? Open Source 2026-07-31 1,681 --
How to Automate Vulnerability Remediation in 2026 Open Source 2026-07-31 1,928 --
SCA Remediation: A Complete Guide for AppSec Teams Open Source 2026-07-31 1,380 --
Mean Time to Remediate (MTTR): How to Measure It and Cut It -- 2026-08-01 1,098 --
NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages Kiran Raj 2026-08-04 2,752 3
The Registry Just Became a Checkpoint. It Still Isn't Your Perimeter Aditya Patil 2026-08-07 884 --
Best in Class, Novel in Method: Opus 5 and the Recall-Then-Diverge Pattern Luca Compagna 2026-08-10 3,668 --
Why NPM Malware Keeps Reaching for Bun Robert Haynes 2026-08-11 2,797 --
CISO's Guide: Build vs Buy AI Code Security Varun Badhwar 2026-08-11 263 --
What is an agent harness? The software that turns a model into an agent AI/ML 2026-08-14 2,429 --
AI SAST: Code Security for the Agentic SDLC Sarah Johnson 2026-08-17 206 --
Harness engineering: how to make AI coding agents reliable and secure AI/ML 2026-08-17 1,881 --
What are agentic workflows? A practical guide to building and securing them AI/ML 2026-08-18 2,287 --
When you can't upgrade: open source examples of Endor Patches Shristi Nadakatti 2026-08-18 1,043 --
Hacking your life with AI can get you hacked Peyton Kennedy 2026-08-18 1,839 2
How AI orchestration platforms ship RCE by design Peyton Kennedy 2026-08-18 204 --
What is a security harness for AI coding agents? -- 2026-08-19 1,878 --
Why Endor Labs AI SAST for C finds what other tools miss Sarah Johnson 2026-08-19 996 --
Why C Has Always Broken Static Analysis Sarah Johnson 2026-08-19 1,063 --
GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm Cris Staicu 2026-08-20 2,423 2
Heaps of Built-in's: How JavaScript Sandboxes work Robert Haynes 2026-08-20 1,114 --
Customer Zero: Implementing Package Firewall at Endor Labs Devon Powley 2026-08-25 1,242 --
FedRAMP 2026 vulnerability rules make reachability a requirement Andrew Stiefel 2026-08-26 1,826 --
Mini Shai-Hulud worm hits openapi-react-query-codegen, spreads across npm, RubyGems, and PyPI Peyton Kennedy 2026-08-28 2,036 --
The real test of AI-native code analysis: is your security debt shrinking? Andrew Stiefel 2026-08-31 1,322 --
Hooks are the control plane for the agentic development lifecycle Andrew Stiefel 2026-09-01 1,032 --
Prompt Patterns That Make Coding Agents Write Safer Code AI/ML 2026-09-02 1,621 --
The Secure Agentic Development Lifecycle (ADLC), Explained -- 2026-09-02 1,824 --
How to Secure AI-Generated Code: A Developer's Workflow AI/ML 2026-09-02 2,550 --
Agentic Development Security: How to Secure Code Your Agents Write AI/ML 2026-09-02 2,205 --
AI Code Review: How to Actually Review Code an Agent Wrote -- 2026-09-02 1,993 --
Secrets in AI-Generated Code: How Coding Agents Leak Credentials AI/ML 2026-09-02 1,994 --
Application Security Monitoring for AI-Assisted Development AI/ML 2026-09-02 1,113 --
Hallucinated Packages: How AI Invents Dependencies Attackers Exploit Open Source 2026-09-02 1,373 --
Prompt Injection Against Coding Agents: The Attack Surface Nobody Owns AI/ML 2026-09-02 1,958 --
SAST for AI-Generated Code: What Static Analysis Catches and Misses AI/ML 2026-09-02 1,797 --
From SDLC to ADLC: why application security needs coding agent governance Andrew Stiefel 2026-09-03 910 --
How Endor Labs AI SAST Learns What Matters to Your Organization Julien Sobrier 2026-09-07 1,319 --
GPT-6 Astra on Codex - the Biggest Codex Leap to Date Luca Compagna 2026-09-08 1,667 --
Better models are making agent patch review more expensive, not less Robert Haynes 2026-09-08 996 --
Introducing Package Firewall for VS Code Extensions: Detect and Block Malicious Extensions From the IDE Aditya Patil 2026-09-09 600 --
Introducing Threat Center and Package Firewall for VS Code Extensions: Malware Protection From the Registry to the Developer Workstation Aditya Patil 2026-09-09 560 --
The first part of the EU Cyber Resiliency Act comes into effect on September 11th. Are you Ready? Robert Haynes 2026-09-10 1,633 --
Engineering a security harness for AI coding agents Andrew Stiefel 2026-09-23 2,338 --