Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Introducing AURI: Security Intelligence for AI Coding Agents and Developers Amod Gupta 2026-03-03 1,234 --
Intelligence and governance in the software supply chain with Endor Labs and Cloudsmith Eli Scherr 2026-03-10 752 --
The Return of PhantomRaven: Detecting Three New Waves of npm Supply Chain Attacks Rachana Misal 2026-03-10 1,074 --
How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability Andrew Stiefel 2026-03-13 1,550 --
Endor Labs + Zscaler: Zero Trust Application Security for the AI Era Eli Scherr 2026-03-17 1,151 --
Top 10 Semgrep Alternatives for AppSec Teams in 2026 Sarah Hartland 2026-03-18 3,217 --
10 Best Application Security Tools for 2026 Sarah Hartland 2026-03-18 2,878 --
Best Black Duck Alternatives for SCA With Less Noise Sarah Hartland 2026-03-18 2,329 --
Malicious 'Pyronut' Package Backdoors Telegram Bots with Remote Code Execution Henrik Plate 2026-03-18 2,086 --
npm is serving malware to 134,000 developers, and the maintainer can’t stop it Kiran Raj 2026-03-18 2,277 --
7 Best Application Security Tools for the AI Era (2026) Sarah Hartland 2026-03-18 4,449 --
Top 10 Veracode Alternatives for AppSec Teams in 2026 Sarah Hartland 2026-03-18 3,212 --
Best DevSecOps Platform Tools for AppSec Teams in 2026 Sarah Hartland 2026-03-18 2,824 --
AURI: Security Intelligence for Agentic Software Development AI/ML 2026-03-19 247 --
Top 8 Snyk Alternatives for Security & Engineering Teams Sarah Hartland 2026-03-19 2,384 --
Endor Labs vs Snyk: SCA, SAST, and Containers Compared Sarah Hartland 2026-03-19 2,107 --
Best Checkmarx Alternatives & Competitors in 2026 Sarah Hartland 2026-03-20 2,374 --
CanisterWorm: Malicious npm Packages Deploy Self-Propagating Supply Chain Worm Henrik Plate 2026-03-21 1,497 --
Cursor Security: How to Secure AI-Generated Code in 2026 Sarah Hartland 2026-03-23 2,192 --
Best Software Composition Analysis (SCA) Tools for 2026 Sarah Hartland 2026-03-23 2,675 --
Top 8 Aikido Alternatives for Developer Security in 2026 Sarah Hartland 2026-03-23 2,568 --
Software Supply Chain Security: Why SCA Alone Falls Short Sarah Hartland 2026-03-23 2,672 --
Top 8 Application Security Platforms: Ranked for 2026 Sarah Hartland 2026-03-23 2,565 --
Malware Package Firewall: Block Threats Before They Hit Your Code Sarah Hartland 2026-03-24 2,610 --
9 Best SAST Tools in 2026: Top SAST Solutions Compared Sarah Hartland 2026-03-24 3,030 --
TeamPCP Isn't Done: Threat Actor Behind Trivy and KICS Compromises Now Hits LiteLLM's 95 Million Monthly Downloads on PyPI Kiran Raj 2026-03-24 683 --
Best Software Supply Chain Security Tools for AppSec Teams Sarah Hartland 2026-03-24 2,985 --
Software Supply Chain Security: How to Manage Risk at Scale Sarah Hartland 2026-03-24 2,192 --
Top 10 Software Composition Analysis (SCA) Tools in 2026 Sarah Hartland 2026-03-26 3,235 --
SolarWinds took a nation-state. The next attack just needs an LLM and $5. Varun Badhwar 2026-03-26 1,311 --
What We Can Learn About GitHub Actions Security from the Trivy Breach Robert Haynes 2026-03-26 1,888 --
TeamPCP Strikes Again: Telnyx Compromised Three Days After LiteLLM Kiran Raj 2026-03-27 2,323 --
A Practitioner’s Guide to Responding to the TeamPCP Supply Chain Attacks Malware 2026-03-27 157 --
Axios compromised: hijacked maintainer account pushes malicious npm versions Meenakshi S L 2026-03-30 3,837 --
New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages Andrew Stiefel 2026-04-01 708 --
Best Application Security Testing (AST) Tools Compared Sarah Hartland 2026-04-02 2,818 --
Best Code Security Platforms in 2026, Compared Sarah Hartland 2026-04-02 2,457 --
10 Best DevSecOps Platforms for AppSec Teams in 2026 Sarah Hartland 2026-04-02 3,061 --
Top Gen AI AppSec Tools in 2026: A Practitioner's Guide Sarah Hartland 2026-04-02 2,460 --
Best DevSecOps Tools for AppSec Teams in 2026 Sarah Hartland 2026-04-02 2,639 --
Best Application Security Tools for DevSecOps in 2026 Sarah Hartland 2026-04-02 3,595 --
🐱 The Inevitable Feline Takeover: A Serious Analysis Sarah Hartland 2026-04-02 395 --
What Security and Engineering Teams Fear Most About Malware Andrew Stiefel 2026-04-08 1,943 --
Fable 5.1 takes the top spot — faster than Opus 5, cheaper, and cleaner Luca Compagna 2026-04-09 2,627 --
AI-Generated Malware Risk: A Practical Guide for Developers Endor Labs 2026-04-09 1,740 --
Top 10 SAST Tools in 2026: Accuracy, Speed, and Noise Sarah Hartland 2026-04-09 3,452 --
Root in One Request: Marimo's Critical Pre-Auth RCE (CVE-2026-39987) Kiran Raj 2026-04-09 1,923 --
The Unkillable C2: How Attackers Are Moving Command and Control to the Blockchain Robert Haynes 2026-04-13 2,808 --
Agent Security League: Evaluating the Security of AI-Coded Software Luca Compagna 2026-04-15 173 --
Is AI Coding Safe? Introducing the Agent Security League Luca Compagna 2026-04-15 2,089 --