|
From Shift Left to Shift Down: Making SAST Work for Developers
|
Andrew Stiefel |
2025-10-27 |
1,407 |
--
|
|
Why AI Code Gets Less Secure With Every Prompt
|
Chris Hughes |
2025-10-28 |
1,054 |
--
|
|
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
|
Meenakshi S L |
2025-11-06 |
885 |
--
|
|
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
|
Jenn Gile |
2025-11-06 |
838 |
--
|
|
False Negatives in SAST: Hidden Risks Behind the Noise
|
Andrew Stiefel |
2025-11-06 |
951 |
--
|
|
Announcing Native Support for OWASP Secure Pipeline Verification Standard
|
Amod Gupta |
2025-11-10 |
1,154 |
--
|
|
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
|
Cris Staicu |
2025-11-11 |
1,911 |
--
|
|
The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign
|
Cris Staicu |
2025-11-11 |
1,909 |
2
|
|
Code-to-Cloud Application Risk Management with Upwind and Endor Labs
|
Eli Scherr |
2025-11-12 |
498 |
--
|
|
Introducing AI SAST That Thinks Like a Security Engineer
|
Amod Gupta |
2025-11-19 |
1,444 |
--
|
|
AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security
|
Security |
2025-11-19 |
210 |
--
|
|
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
|
Eli Scherr |
2025-11-20 |
488 |
--
|
|
How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder
|
Aya Estrin |
2025-11-21 |
1,157 |
--
|
|
The OWASP Top 10 Gets Modernized
|
Chris Hughes |
2025-11-21 |
1,426 |
--
|
|
Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime
|
Henrik Plate |
2025-11-24 |
2,479 |
--
|
|
Understanding NPM Worms and the Shai-Hulud Attack
|
Robert Haynes |
2025-11-25 |
1,563 |
--
|
|
Rubrik Hits Aggressive SLAs via Endor Labs
|
Jenn Gile |
2025-12-02 |
1,415 |
--
|
|
Critical Remote Code Execution (RCE) Vulnerabilities in React and Next.js
|
Henrik Plate |
2025-12-03 |
1,037 |
--
|
|
From Vision to Reality: How Endor Labs Delivers Developer-First Security
|
Robert Haynes |
2025-12-09 |
1,189 |
--
|
|
Developer Experience: The Key to Successful Security
|
Robert Haynes |
2025-12-09 |
2,293 |
--
|
|
When Regex Isn’t Enough: How We Discovered CVE-2025-13780 in pgAdmin
|
Meenakshi S L |
2025-12-12 |
1,258 |
--
|
|
When a Broken Fix Leads to RCE: How We Found CVE-2025-66626 in Argo
|
Meenakshi S L |
2025-12-12 |
1,136 |
--
|
|
Bringing Malware Detection Into AI Coding Workflows with Cursor Hooks
|
George Apostolopoulos |
2025-12-17 |
1,058 |
--
|
|
CVE-2025-68428: Critical Path Traversal in jsPDF
|
Peyton Kennedy |
2026-01-06 |
1,078 |
--
|
|
n8mare on auth street: supply chain attack targets n8n ecosystem
|
Kiran Raj |
2026-01-09 |
1,708 |
--
|
|
CVE-2025-12543: Host Header Validation Bypass in Undertow
|
Meenakshi S L |
2026-01-09 |
812 |
--
|
|
Eight for One: Multiple Vulnerabilities Fixed in the Node.js Runtime
|
Peyton Kennedy |
2026-01-13 |
1,311 |
--
|
|
Astronomer Modernizes AppSec with Endor Labs
|
Jenn Gile |
2026-01-20 |
1,100 |
--
|
|
Your Next Breach Won’t Be a CVE: Connecting Real Incidents to AI-Aware Code Review
|
Matt Brown |
2026-01-21 |
1,684 |
--
|
|
How Fake Font Packages Abused npm as a CDN
|
Henrik Plate |
2026-01-23 |
1,244 |
--
|
|
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
|
Peyton Kennedy |
2026-01-23 |
1,469 |
--
|
|
CVE-2026-22709: Critical Sandbox Escape in vm2 Enables Arbitrary Code Execution
|
Peyton Kennedy |
2026-01-27 |
1,712 |
4
|
|
npm Account Takeovers are a Growing Malware Trend
|
Jenn Gile |
2026-01-29 |
2,311 |
--
|
|
7 Snyk Alternatives for Engineering Teams in 2026
|
Developer Productivity |
2026-02-02 |
3,716 |
--
|
|
Static Analysis in the Age of AI, Part I: AI Coding Assistants
|
Robert Haynes |
2026-02-03 |
1,012 |
--
|
|
Test-First Prompting: Using TDD for Secure AI-Generated Code
|
Jenn Gile |
2026-02-04 |
855 |
--
|
|
CVE-2026-25049 Expression Escape Vulnerability Leading to RCE in n8n
|
Cris Staicu |
2026-02-04 |
1,645 |
--
|
|
The Architectural Shift Behind the AI SDLC
|
Aditya Patil |
2026-02-06 |
774 |
--
|
|
Design Flaws in AI Generated Code
|
Andrew Stiefel |
2026-02-09 |
1,094 |
--
|
|
AI SAST in Action: Finding Real Vulnerabilities in OpenClaw
|
Peyton Kennedy |
2026-02-10 |
696 |
--
|
|
Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
|
Kyle Quest |
2026-02-11 |
1,781 |
--
|
|
The Missing Layer: Why Container OS Libraries Need Reachability Analysis
|
Chris Hughes |
2026-02-13 |
1,739 |
--
|
|
How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities
|
Peyton Kennedy |
2026-02-18 |
2,918 |
--
|
|
Supply Chain Attack targeting Cline installs OpenClaw
|
Henrik Plate |
2026-02-18 |
453 |
--
|
|
AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass
|
Peyton Kennedy |
2026-02-19 |
2,041 |
--
|
|
CVE-2026-25896: Entity Encoding Bypass in fast-xml-parser
|
Peyton Kennedy |
2026-02-21 |
851 |
--
|
|
SANDWORM_MODE: Dissecting a Multi-Stage npm Supply Chain Attack
|
Kiran Raj |
2026-02-23 |
3,861 |
--
|
|
Anthropic just validated that AppSec is the biggest opportunity in cybersecurity
|
Varun Badhwar |
2026-02-24 |
1,721 |
--
|
|
CVE-2026-27959: Userinfo Host Header Injection in Koa
|
Peyton Kennedy |
2026-02-25 |
1,951 |
--
|
|
Remote Code Execution (RCE) in Ghost CMS (CVE-2026-29053): A Transitive Dependency Wreaks Havoc
|
Cris Staicu |
2026-03-02 |
1,743 |
--
|
