Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Critical SQL Injection Vulnerability in LlamaIndex (CVE-2025-1793) – Advisory and Analysis Meenakshi S L 2025-06-09 843 --
Next-Gen SCA for C/C++: Closing the Detection Gap Julien Sobrier 2025-06-11 855 --
Zebra Technologies Cuts SCA Noise by 97% with Endor Labs Jenn Gile 2025-06-11 797 --
Mysten Labs Improves DevEx with Endor Labs Jenn Gile 2025-06-17 1,073 --
Under the Hood: Mysten Labs’ Strategies for Building the Most Secure Blockchain Paul Padilla 2025-06-17 1,379 --
Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis Andrew Stiefel 2025-06-18 199 --
What is AppSec? A 2025 Guide for Security Practitioners Sarah Hartland 2025-06-19 2,676 --
Streamline Investigation with Enriched Vulnerability Search Pawan Shankar 2025-06-25 450 --
People.ai Transforms Security and Compliance with Endor Labs Jenn Gile 2025-07-01 1,354 --
Under the Hood: People.ai's Proactive Approach to AI Security Aman Sirohi 2025-07-01 1,224 --
Struggling to Patch Spring-Web? Try This Instead Somak Dutta 2025-07-09 1,538 --
Endor Labs & Oligo: Closing the Loop Between Secure Code and Secure Runtime Tom Gleason 2025-07-10 569 --
Endor Outpost: Deploy Endor Labs Behind Your Firewall Ron Harnik 2025-07-16 699 --
Structuring Prompts for Secure Code Generation Andrew Stiefel 2025-07-16 685 --
Everything You Need To Know About The FedRAMP RFC-0012 Chris Hughes 2025-07-18 1,474 --
CVE-2025-54313: eslint-config-prettier Compromise — High Severity but Windows-Only Security 2025-07-19 711 3
Secure-Insecure Diff: A Smarter Way to Prompt for Safer Code Andrew Stiefel 2025-07-22 614 --
How to Evaluate Endor Labs SCA for C/C++ Projects Robert Haynes 2025-07-22 1,233 --
Endor Labs now integrates with Cursor AI Code Editor Jamie Scott 2025-07-24 472 --
How to Detect Infrastructure as Code (IaC) Misconfigurations with AI Security Code Review Pawan Shankar 2025-07-28 385 --
Endor Labs Now Available on Google Cloud Marketplace Eli Scherr 2025-07-29 583 --
Securing AI Coding Assistants: A Total Cost Analysis Varun Badhwar 2025-07-30 1,052 --
Endor Labs now integrates with GitHub Copilot in VS Code Jamie Scott 2025-07-31 506 --
Anti-Pattern Avoidance: A Simple Prompt Pattern for Safer AI-Generated Code Andrew Stiefel 2025-08-05 297 --
Why Your AI Code Assistant Might Be Shipping CVEs Andrew Stiefel 2025-08-05 1,013 --
Fireside Chat: Building a High-Trust Product Security Program at Zebra Jasyn Voshell 2025-08-06 6,255 --
How to Detect LLM Prompt Injection Risks Andrew Stiefel 2025-08-06 598 --
Fireside Chat: CISOs on AI, Shift Left, and Building Trust at People.ai and AppLovin Aman Sirohi 2025-08-07 2,754 --
The Last Mile of AI Productivity Is Code Review Varun Badhwar 2025-08-11 910 --
The Most Common Security Vulnerabilities in AI-Generated Code Andrew Stiefel 2025-08-12 411 --
Detect End-of-Life (EOL) Software in Containers with Endor Labs Pawan Shankar 2025-08-13 402 --
Shadow AI in Your Codebase: A Hidden Supply Chain Risk Julien Sobrier 2025-08-20 845 --
Cursor Develops a Secure Product with Endor Labs Jenn Gile 2025-08-20 973 --
Five9 Transforms Software Supply Chain Security with Endor Labs Jenn Gile 2025-08-20 1,280 --
Under the Hood: How I Vet Early-Stage Startups for Critical Security Programs Greg Pettengill 2025-08-20 835 --
When CodeRabbit became PwnedRabbit: A cautionary tale for every GitHub App vendor (and their customers) Varun Badhwar 2025-08-20 1,410 --
How We Cracked SCA for C/C++ Codebases Georgios Gousios 2025-08-21 846 --
Nx build platform compromised by supply chain attack – How attackers collude with AI code assistants Henrik Plate 2025-08-27 1,256 --
Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug Andrew Stiefel 2025-09-08 560 --
npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised Henrik Plate 2025-09-16 972 --
Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC AI/ML 2025-09-16 864 --
How to Defend Against NPM Software Supply Chain Attacks Jamie Scott 2025-09-16 1,496 1
Fireside Chat: Building an AppSec Program for Cursor Jenn Gile 2025-09-19 7,125 --
It’s Time to Take Malware Seriously (Attackers Do) Jenn Gile 2025-09-19 1,704 --
Why Cooldown Windows Belong in Every npm Security Strategy Camilla Odlund 2025-09-22 888 --
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook Varun Badhwar 2025-09-22 1,437 --
Proactive Protection from Malware Attacks Malware 2025-09-23 438 --
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs Karen Ng 2025-10-02 814 --
CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server Jenn Gile 2025-10-10 1,162 --
Why SAST Failed (And What’s Next) Dimitri Stiliadis 2025-10-16 1,040 --