Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Opus 5.5: 6x cheaper and 2x faster than Fable 5.1, but only 33.5% of code is secure Luca Compagna 2026-09-24 2,371 --
Project-Mount Symlink Traversal in brig: How a Sandbox Reaches Host Directories It Was Never Given Peyton Kennedy 2026-09-28 2,083 --
GPT-6 Sol on Codex: average scores, quarter the cost Luca Compagna 2026-10-01 2,193 --
Endor Labs Featured in Gartner Research on Claude Code Permissions and Agent Governance Andrew Stiefel 2026-10-01 867 --
Sandboxes: A Primer on Containing Things That Don't Want to Be Contained Robert Haynes 2026-10-02 2,297 --
GPT-6.1 Sol on Codex: Astra-level security, a third faster, zero cheating Luca Compagna 2026-10-02 913 --
What does it mean to sandbox an AI coding agent? Amod Gupta 2026-10-05 1,416 --
Endor Labs + SpaceXAI: Securing every stage of agentic software delivery News 2026-10-05 1,010 --
Tensorlake npm package compromised by Shai-Hulud in latest software supply chain attack Kiran Raj 2026-10-08 669 --
What Is Code Security? Managing Vulnerabilities Across Large Codebases -- 2026-10-12 2,066 --
What Is DevSecOps? How the Practice Changes When Agents Fix Code -- 2026-10-12 1,983 --
Executive Order 14028 SBOM Requirements: What to Comply With and How -- 2026-10-12 1,431 --
What Is SAST? Static Analysis in the Age of AI-Generated Code -- 2026-10-12 1,843 --
How to Secure the Software Delivery Pipeline -- 2026-10-12 2,719 --
What Is AI Security? A Practical Definition for Security Teams -- 2026-10-12 1,686 --
What Is Application Security Testing? SAST, DAST, and SCA Explained -- 2026-10-12 1,939 --
How to Use Reachability to Cut Vulnerability Alerts -- 2026-10-12 1,954 --
Endor Labs and Bright Security Partner to Close the Gap Between Discovery and Remediation Eli Scherr 2026-10-12 1,226 --
Same analysis, your account: BYOK for Endor Labs AI SAST Sarah Johnson 2026-10-14 1,415 --
The rest of the EU Cyber Resiliency Act lands on December 11th, 2027. Robert Haynes 2026-10-14 2,122 --
Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive Luca Compagna 2026-10-20 2,006 --
LiteLLM 1.107.0 Compromised: Python Startup Hooks Steal Cloud, AI, and Proxy Credentials Peyton Kennedy 2026-10-21 1,987 --
eMudhra Intermediate CA Compromise: The Trust Stores You Patched, and the Ones You Didn't Know You Had Peyton Kennedy 2026-10-21 2,776 --
PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) Andrew Stiefel 2026-10-21 742 --
Once upon a codebase forest: The story behind Harness Your Mechs Myles Madden 2026-10-21 2,552 --
Harness Your Mechs: What to build & what to buy when you bring AI into AppSec Myles Madden 2026-10-21 2,475 --
Four levels for architecting security into the agentic SDLC Robert Haynes 2026-10-21 339 --
What is the AI-native SDLC? AI SDLC, AI-DLC, and ADLC explained Agent Security 2026-10-22 1,046 --
ADLC security best practices: how to secure agentic development from prompt to production Agent Security 2026-10-23 1,295 --
Everything, everywhere, all at once… the week software broke Sarah Johnson 2026-10-23 1,514 --
What is a software factory? How it works and where AI fits AI/ML 2026-10-24 1,832 --
How to evaluate ADLC security solutions: A buyer's checklist ADLC 2026-10-27 1,785 --
The ADLC maturity model: stages of agentic development security ADLC 2026-10-27 2,029 --
Introducing AURI Fix for Open Source Anand Sawant 2026-10-27 1,270 --
Endor Labs AI SAST Finds Two Apache Kafka Zero-Days: Unbounded Memory Allocation from Brokers to Kafka Streams Peyton Kennedy 2026-10-28 2,328 --
ADLC compliance: Mapping agentic development to NIST SSDF, the OWASP LLM Top 10, and the EU AI Act ADLC 2026-10-28 2,178 --
Endor Labs + Google Antigravity: Secure code by default in agentic workflows Aditya Patil 2026-10-29 565 --
What is an AI bill of materials (AIBOM)? ADLC 2026-10-29 2,001 --
ADLC metrics: How to measure agentic development security ADLC 2026-10-29 1,882 --
The Binance hack is a warning: developer workstations hold the keys to your business Agent Security 2026-10-30 1,858 --