Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Software Supply Chain Security Security 2026-07-27 240 --
Endor Labs for Connected Products Security 2026-07-27 225 --
Secrets Detection Security 2026-07-27 252 --
Package Firewall Security & Compliance 2026-07-27 166 --
Endor Patches AI/ML 2026-07-27 230 --
AI Code Review AI/ML 2026-07-27 244 --
Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Application Security Andrew Stiefel 2026-07-23 998 --
The OpenAI and Hugging Face security incident: why AI agents need deterministic guardrails Andrew Stiefel 2026-07-22 995 --
Beyond MCP: The New Security Playbook for Coding Agents George Apostolopoulos 2026-07-21 3,063 --
OpenAI Codex with GPT-5.6 Sol: competitive, zero cheating, one unique Django fix Luca Compagna 2026-07-17 2,296 --
How Unprotected Release Branches Let Attackers Compromise AsyncAPI Kiran Raj 2026-07-14 3,694 --
Everyone Wins Their Own Benchmark Sarah Johnson 2026-07-14 1,204 --
Veiled in Trust: Software Supply Chain Attacks Explained Andrew Stiefel 2026-07-13 1,007 --
When AI Imports Vulnerable Dependencies: Securing AI-Generated Code Andrew Stiefel 2026-07-13 1,082 --
What Is a Software Bill of Materials? A Practical Guide Andrew Stiefel 2026-07-13 2,359 --
Dependency Confusion: How Attackers Poison Your Build Andrew Stiefel 2026-07-13 1,306 --
What Is Software Supply Chain Security? The Complete Guide Andrew Stiefel 2026-07-13 2,207 --
AI-Generated Malware and the Software Supply Chain Andrew Stiefel 2026-07-13 1,026 --
Best SBOM Tools in 2026, Compared Andrew Stiefel 2026-07-13 1,372 --
Securing Open Source Dependencies: A Developer's Guide Andrew Stiefel 2026-07-13 906 --
What Is Malicious Code? Types, Examples & How to Protect Yourself Andrew Stiefel 2026-07-13 1,142 --
Slopsquatting: When AI Agents Hallucinate Malicious Packages Andrew Stiefel 2026-07-13 1,189 --
Claude Sonnet 5 with Cursor: strong reasoning, throttled by the harness Luca Compagna 2026-07-09 1,608 --
Sonnet 5 vs Fable 5: reliable versus security-forward, not better versus worse Luca Compagna 2026-07-09 1,392 --
Egnyte Accelerates FedRAMP & Protects Engineering Velocity with Endor Labs Andrew Stiefel 2026-07-08 1,791 --
Cyber insurers are pricing based on patching speed Andrew Stiefel 2026-07-07 975 --
Claude Sonnet 5 with Claude Code: strong on function, average on security, and unusually honest Luca Compagna 2026-07-02 622 --
Endor Labs Named in the 2026 Gartner® Hype Cycle™ for Secure Software Engineering Andrew Stiefel 2026-07-02 887 --
Benchmarking Endor Labs AI SAST: 2.6x more real vulnerabilities found than frontier models Sarah Johnson 2026-06-30 1,733 --
Endor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library Peyton Kennedy 2026-06-30 2,671 8
Open source carries the world. Patching it at Mythos-scale can't fall to maintainers alone. Varun Badhwar 2026-06-25 1,449 --
Shai-Hulud Strikes Leo Platform npm Kiran Raj 2026-06-25 3,728 --
Endor Labs is a Visionary in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security Andrew Stiefel 2026-06-18 987 --
Claude Fable 5, take two: same model, different harness, and a very different result Luca Compagna 2026-06-17 2,306 3
AppSec was built to find problems. The Mythos era demands you fix them, fast. Robert Haynes 2026-06-17 1,871 --
Mastra npm Org Compromised: Multiple Packages Trojanized to Drop a Remote Payload via easy-day-js Peyton Kennedy 2026-06-16 2,107 3
Build vs. Buy Code Security: Same Model, Same Tasks, 12x the Token Bill Varun Badhwar 2026-06-11 1,401 --
The Token Economics of AI AppSec Agents Matt Brown 2026-06-11 233 --
Recall, not reasoning: how AI coding agents cheat security benchmarks Luca Compagna 2026-06-10 1,896 --
Claude Fable 5: Mythos-grade hype, record cheating, and a few hall-of-fame entries Luca Compagna 2026-06-10 1,593 410
Endor Labs Named a Representative Vendor in the 2026 Gartner® Innovation Insight for Agentic Application Security Testing Andrew Stiefel 2026-06-08 1,275 --
Shai-Hulud "Hades" Wave Hits Six PyPI Bioinformatics Packages via Stolen Tokens Kiran Raj 2026-06-08 2,666 --
Trojanized ai-sdk-ollama Delivers Miasma, a Self-Replicating npm Worm via binding.gyp Danny Kim 2026-06-03 3,534 --
Endor Labs Recognized in the Forrester Agentic Development Security Tools Landscape Andrew Stiefel 2026-06-01 812 --
Endor Labs + Cursor: Building the security foundation for agentic coding Andrew Davidson 2026-05-28 996 --
Designing Reports for Three Different Workflows Karen Ng 2026-05-27 1,288 --
Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Platform Engineering Andrew Stiefel 2026-05-21 916 --
Trojanized Microsoft SDK: durabletask 1.4.1 through 1.4.3 Deliver Credential-Stealing Malware Peyton Kennedy 2026-05-19 1,932 --
Endor Labs and Chainguard Partner to Deliver End-to-End Software Supply Chain Security Eli Scherr 2026-05-19 757 --
Mini Shai-Hulud Returns: 600+Malicious npm Packages Fake Sigstore Badges in AntV Ecosystem Attack Peyton Kennedy 2026-05-19 2,493 --