|
It's About Thyme: How a Whitespace Character Broke Thymeleaf's Expression Sandbox (CVE-2026-40478)
|
Cris Staicu |
2026-04-16 |
2,473 |
--
|
|
AI Coding Agent Security Benchmark
|
-- |
2026-04-16 |
400 |
1
|
|
The Dangers of Reusing Protobuf Definitions: Critical Code Execution in protobuf.js (GHSA-xq3m-2v4x-88gg)
|
Cris Staicu |
2026-04-17 |
3,141 |
3
|
|
Claude Opus 4.7 Sets New Records in the Endor Labs Agent Security League
|
Robert Haynes |
2026-04-17 |
1,061 |
--
|
|
Surge in submissions forces NIST to change how it handles CVEs. Here's what it means for vulnerability management.
|
Henrik Plate |
2026-04-17 |
782 |
--
|
|
8 Best SCA Security Tools for 2026, Ranked by Signal-to-Noise
|
Sarah Hartland |
2026-04-22 |
2,710 |
--
|
|
Common C/C++ Vulnerabilities: A Practical Guide to Prevention
|
Sarah Hartland |
2026-04-22 |
2,140 |
--
|
|
Dependency Management Tools Every Engineering Team Needs
|
Sarah Hartland |
2026-04-22 |
3,970 |
--
|
|
Best SCA Solutions for 2026: Reachability-Driven Analysis
|
Sarah Hartland |
2026-04-22 |
2,642 |
--
|
|
Developer Security Tools Compared: A Practical Guide for 2026
|
Sarah Hartland |
2026-04-22 |
2,671 |
--
|
|
Application Security Testing: A 2026 Guide to Types, Tools, and Methods
|
Sarah Hartland |
2026-04-22 |
4,017 |
--
|
|
Organizational Behavior Predicts OSS Malware Program Success
|
Andrew Stiefel |
2026-04-22 |
1,041 |
--
|
|
6 Best DAST Tools for DevSecOps Teams in 2026
|
Sarah Hartland |
2026-04-22 |
2,599 |
--
|
|
Malicious Package Detection: Beyond CVEs and Scanners
|
Sarah Hartland |
2026-04-22 |
3,045 |
--
|
|
Inside the Bitwarden Software Supply Chain Attack (Shai-Hulud)
|
Kiran Raj |
2026-04-23 |
3,621 |
--
|
|
The agent control plane needs a security layer
|
Andrew Stiefel |
2026-04-23 |
1,260 |
--
|
|
GPT-5.5 Sets a New Code Security Record with Cursor, not Codex, in Agent Security League
|
Henrik Plate |
2026-04-27 |
1,016 |
--
|
|
Beyond Mythos: A CISO's Guide to Building an Effective Software Security Program for the AI Era
|
Varun Badhwar |
2026-04-29 |
187 |
--
|
|
Mini Shai-Hulud: npm Worm Hits SAP Developer Packages
|
Kiran Raj |
2026-04-29 |
2,926 |
--
|
|
LLM Development Risks: Security Threats and Mitigation Strategies
|
-- |
2026-04-30 |
2,024 |
--
|
|
Popular lightning PyPI Package Backdoored in Latest Shai-Hulud Wave
|
Henrik Plate |
2026-04-30 |
2,618 |
--
|
|
How to Secure AI Models in Production Environments
|
-- |
2026-05-06 |
2,461 |
--
|
|
What Is Package Integrity? Definition and Best Practices
|
-- |
2026-05-06 |
2,071 |
--
|
|
Vulnerability Blast Radius: How to Measure and Reduce Impact
|
-- |
2026-05-06 |
1,926 |
--
|
|
AI Model Security Strategies for CISOs and Security Leaders
|
-- |
2026-05-06 |
2,222 |
--
|
|
Understanding Software Distribution Security: Key Concepts Explained
|
-- |
2026-05-06 |
1,930 |
--
|
|
AI Model Risk Assessment: Framework and Best Practices
|
-- |
2026-05-06 |
2,197 |
--
|
|
AI Risk Reduction: Complete Guide to Mitigation Strategies for 2026
|
-- |
2026-05-06 |
2,058 |
--
|
|
Secure AI Workflows: From Development to Deployment
|
-- |
2026-05-06 |
2,236 |
--
|
|
What Is Mythos and Why It Matters for Software Security
|
-- |
2026-05-07 |
1,818 |
--
|
|
Endor Labs Threat Research
|
-- |
2026-05-07 |
1,060 |
--
|
|
Shai-Hulud compromises the @tanstack ecosystem: 160+ packages compromised
|
Peyton Kennedy |
2026-05-11 |
2,916 |
--
|
|
Introducing Package Firewall
|
Amod Gupta |
2026-05-12 |
705 |
--
|
|
Introducing Security for AI Coding Agents and Workstations
|
Amod Gupta |
2026-05-12 |
991 |
--
|
|
Introducing Coding Agent Governance: Using Hooks to Bring Visibility to the ADLC
|
Robert Haynes |
2026-05-12 |
1,607 |
--
|
|
Malware Defense: A multi-agent detection engine and package firewall
|
Robert Haynes |
2026-05-12 |
201 |
--
|
|
How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise
|
Robert Haynes |
2026-05-14 |
2,512 |
--
|
|
From Code to Cloud: Endor Labs Joins the Wiz Integration Network
|
News |
2026-05-15 |
402 |
--
|
|
When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms
|
George Apostolopoulos |
2026-05-18 |
1,811 |
--
|
|
Designing Coding Agent Governance: A New Surface for AI Risk
|
Karen Ng |
2026-05-18 |
1,609 |
--
|
|
Trojanized Microsoft SDK: durabletask 1.4.1 through 1.4.3 Deliver Credential-Stealing Malware
|
Peyton Kennedy |
2026-05-19 |
1,932 |
--
|
|
Endor Labs and Chainguard Partner to Deliver End-to-End Software Supply Chain Security
|
Eli Scherr |
2026-05-19 |
757 |
--
|
|
Mini Shai-Hulud Returns: 600+Malicious npm Packages Fake Sigstore Badges in AntV Ecosystem Attack
|
Peyton Kennedy |
2026-05-19 |
2,493 |
--
|
|
Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Platform Engineering
|
Andrew Stiefel |
2026-05-21 |
916 |
--
|
|
Designing Reports for Three Different Workflows
|
Karen Ng |
2026-05-27 |
1,288 |
--
|
|
Endor Labs + Cursor: Building the security foundation for agentic coding
|
Andrew Davidson |
2026-05-28 |
996 |
--
|
|
Endor Labs Recognized in the Forrester Agentic Development Security Tools Landscape
|
Andrew Stiefel |
2026-06-01 |
812 |
--
|
|
Trojanized ai-sdk-ollama Delivers Miasma, a Self-Replicating npm Worm via binding.gyp
|
Danny Kim |
2026-06-03 |
3,534 |
--
|
|
Endor Labs Named a Representative Vendor in the 2026 Gartner® Innovation Insight for Agentic Application Security Testing
|
Andrew Stiefel |
2026-06-08 |
1,275 |
--
|
|
Shai-Hulud "Hades" Wave Hits Six PyPI Bioinformatics Packages via Stolen Tokens
|
Kiran Raj |
2026-06-08 |
2,666 |
--
|
