Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
How to Secure AI-Generated Code: A Developer's Workflow AI/ML 2026-09-02 2,550 --
Agentic Development Security: How to Secure Code Your Agents Write AI/ML 2026-09-02 2,205 --
AI Code Review: How to Actually Review Code an Agent Wrote -- 2026-09-02 1,993 --
Secrets in AI-Generated Code: How Coding Agents Leak Credentials AI/ML 2026-09-02 1,994 --
Application Security Monitoring for AI-Assisted Development AI/ML 2026-09-02 1,113 --
Hallucinated Packages: How AI Invents Dependencies Attackers Exploit Open Source 2026-09-02 1,373 --
Prompt Injection Against Coding Agents: The Attack Surface Nobody Owns AI/ML 2026-09-02 1,958 --
SAST for AI-Generated Code: What Static Analysis Catches and Misses AI/ML 2026-09-02 1,797 --
Hooks are the control plane for the agentic development lifecycle Andrew Stiefel 2026-09-01 1,032 --
The real test of AI-native code analysis: is your security debt shrinking? Andrew Stiefel 2026-08-31 1,322 --
Mini Shai-Hulud worm hits openapi-react-query-codegen, spreads across npm, RubyGems, and PyPI Peyton Kennedy 2026-08-28 2,036 --
FedRAMP 2026 vulnerability rules make reachability a requirement Andrew Stiefel 2026-08-26 1,826 --
Customer Zero: Implementing Package Firewall at Endor Labs Devon Powley 2026-08-25 1,242 --
GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm Cris Staicu 2026-08-20 2,423 2
Heaps of Built-in's: How JavaScript Sandboxes work Robert Haynes 2026-08-20 1,114 --
What is a security harness for AI coding agents? -- 2026-08-19 1,878 --
Why Endor Labs AI SAST for C finds what other tools miss Sarah Johnson 2026-08-19 996 --
Why C Has Always Broken Static Analysis Sarah Johnson 2026-08-19 1,063 --
What are agentic workflows? A practical guide to building and securing them AI/ML 2026-08-18 2,287 --
When you can't upgrade: open source examples of Endor Patches Shristi Nadakatti 2026-08-18 1,043 --
Hacking your life with AI can get you hacked Peyton Kennedy 2026-08-18 1,839 2
How AI orchestration platforms ship RCE by design Peyton Kennedy 2026-08-18 204 --
AI SAST: Code Security for the Agentic SDLC Sarah Johnson 2026-08-17 206 --
Harness engineering: how to make AI coding agents reliable and secure AI/ML 2026-08-17 1,881 --
What is an agent harness? The software that turns a model into an agent AI/ML 2026-08-14 2,429 --
Why NPM Malware Keeps Reaching for Bun Robert Haynes 2026-08-11 2,797 --
CISO's Guide: Build vs Buy AI Code Security Varun Badhwar 2026-08-11 263 --
Best in Class, Novel in Method: Opus 5 and the Recall-Then-Diverge Pattern Luca Compagna 2026-08-10 3,668 --
The Registry Just Became a Checkpoint. It Still Isn't Your Perimeter Aditya Patil 2026-08-07 884 --
NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages Kiran Raj 2026-08-04 2,752 3
Mean Time to Remediate (MTTR): How to Measure It and Cut It -- 2026-08-01 1,098 --
Agentic Remediation vs. Manual Patching: What Changes When AI Fixes Vulnerabilities Open Source 2026-07-31 1,047 --
Top Vulnerability Remediation Tools for AppSec Teams in 2026 DevSecOps Tools 2026-07-31 2,540 --
How AI Vulnerability Remediation Actually Works in 2026 AI/ML 2026-07-31 1,747 --
What Is Agentic Remediation? The Complete Guide -- 2026-07-31 1,628 --
Automated Dependency Updates Done Right: A Security-First Guide Open Source 2026-07-31 1,603 --
Upgrade Impact Analysis: Patch Without Breaking Your Build Open Source 2026-07-31 1,398 --
What Is Reachability Analysis and Why Does It Matter? Open Source 2026-07-31 1,681 --
How to Automate Vulnerability Remediation in 2026 Open Source 2026-07-31 1,928 --
SCA Remediation: A Complete Guide for AppSec Teams Open Source 2026-07-31 1,380 --
Critical Security Controls for Governing AI Coding Agents Robert Haynes 2026-07-29 1,732 --
Agentic Remediation: Remediation at Machine Speed, Grounded in Security Context AI/ML 2026-07-27 221 --
Endor Labs for Software & Tech Security 2026-07-27 228 --
Endor Labs for Financial Services -- 2026-07-27 145 --
Container Security & Reachability Security 2026-07-27 228 --
AI Code Governance: Secure AI-Generated Code and Govern the Agents That Write It AI/ML 2026-07-27 234 --
SBOM Hub & VEX Security 2026-07-27 230 --
Agent Governance AI/ML 2026-07-27 207 --
AI Model Governance AI/ML 2026-07-27 216 --
Artifact Signing Security 2026-07-27 212 --