|
When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms
|
George Apostolopoulos |
2026-05-18 |
1,811 |
--
|
|
Designing Coding Agent Governance: A New Surface for AI Risk
|
Karen Ng |
2026-05-18 |
1,609 |
--
|
|
From Code to Cloud: Endor Labs Joins the Wiz Integration Network
|
News |
2026-05-15 |
402 |
--
|
|
How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise
|
Robert Haynes |
2026-05-14 |
2,512 |
--
|
|
Introducing Package Firewall
|
Amod Gupta |
2026-05-12 |
705 |
--
|
|
Introducing Security for AI Coding Agents and Workstations
|
Amod Gupta |
2026-05-12 |
991 |
--
|
|
Introducing Coding Agent Governance: Using Hooks to Bring Visibility to the ADLC
|
Robert Haynes |
2026-05-12 |
1,607 |
--
|
|
Malware Defense: A multi-agent detection engine and package firewall
|
Robert Haynes |
2026-05-12 |
201 |
--
|
|
Shai-Hulud compromises the @tanstack ecosystem: 160+ packages compromised
|
Peyton Kennedy |
2026-05-11 |
2,916 |
--
|
|
What Is Mythos and Why It Matters for Software Security
|
-- |
2026-05-07 |
1,818 |
--
|
|
Endor Labs Threat Research
|
-- |
2026-05-07 |
1,060 |
--
|
|
How to Secure AI Models in Production Environments
|
-- |
2026-05-06 |
2,461 |
--
|
|
What Is Package Integrity? Definition and Best Practices
|
-- |
2026-05-06 |
2,071 |
--
|
|
Vulnerability Blast Radius: How to Measure and Reduce Impact
|
-- |
2026-05-06 |
1,926 |
--
|
|
AI Model Security Strategies for CISOs and Security Leaders
|
-- |
2026-05-06 |
2,222 |
--
|
|
Understanding Software Distribution Security: Key Concepts Explained
|
-- |
2026-05-06 |
1,930 |
--
|
|
AI Model Risk Assessment: Framework and Best Practices
|
-- |
2026-05-06 |
2,197 |
--
|
|
AI Risk Reduction: Complete Guide to Mitigation Strategies for 2026
|
-- |
2026-05-06 |
2,058 |
--
|
|
Secure AI Workflows: From Development to Deployment
|
-- |
2026-05-06 |
2,236 |
--
|
|
LLM Development Risks: Security Threats and Mitigation Strategies
|
-- |
2026-04-30 |
2,024 |
--
|
|
Popular lightning PyPI Package Backdoored in Latest Shai-Hulud Wave
|
Henrik Plate |
2026-04-30 |
2,618 |
--
|
|
Beyond Mythos: A CISO's Guide to Building an Effective Software Security Program for the AI Era
|
Varun Badhwar |
2026-04-29 |
187 |
--
|
|
Mini Shai-Hulud: npm Worm Hits SAP Developer Packages
|
Kiran Raj |
2026-04-29 |
2,926 |
--
|
|
GPT-5.5 Sets a New Code Security Record with Cursor, not Codex, in Agent Security League
|
Henrik Plate |
2026-04-27 |
1,016 |
--
|
|
Inside the Bitwarden Software Supply Chain Attack (Shai-Hulud)
|
Kiran Raj |
2026-04-23 |
3,621 |
--
|
|
The agent control plane needs a security layer
|
Andrew Stiefel |
2026-04-23 |
1,260 |
--
|
|
8 Best SCA Security Tools for 2026, Ranked by Signal-to-Noise
|
Sarah Hartland |
2026-04-22 |
2,710 |
--
|
|
Common C/C++ Vulnerabilities: A Practical Guide to Prevention
|
Sarah Hartland |
2026-04-22 |
2,140 |
--
|
|
Dependency Management Tools Every Engineering Team Needs
|
Sarah Hartland |
2026-04-22 |
3,970 |
--
|
|
Best SCA Solutions for 2026: Reachability-Driven Analysis
|
Sarah Hartland |
2026-04-22 |
2,642 |
--
|
|
Developer Security Tools Compared: A Practical Guide for 2026
|
Sarah Hartland |
2026-04-22 |
2,671 |
--
|
|
Application Security Testing: A 2026 Guide to Types, Tools, and Methods
|
Sarah Hartland |
2026-04-22 |
4,017 |
--
|
|
Organizational Behavior Predicts OSS Malware Program Success
|
Andrew Stiefel |
2026-04-22 |
1,041 |
--
|
|
6 Best DAST Tools for DevSecOps Teams in 2026
|
Sarah Hartland |
2026-04-22 |
2,599 |
--
|
|
Malicious Package Detection: Beyond CVEs and Scanners
|
Sarah Hartland |
2026-04-22 |
3,045 |
--
|
|
The Dangers of Reusing Protobuf Definitions: Critical Code Execution in protobuf.js (GHSA-xq3m-2v4x-88gg)
|
Cris Staicu |
2026-04-17 |
3,141 |
3
|
|
Claude Opus 4.7 Sets New Records in the Endor Labs Agent Security League
|
Robert Haynes |
2026-04-17 |
1,061 |
--
|
|
Surge in submissions forces NIST to change how it handles CVEs. Here's what it means for vulnerability management.
|
Henrik Plate |
2026-04-17 |
782 |
--
|
|
It's About Thyme: How a Whitespace Character Broke Thymeleaf's Expression Sandbox (CVE-2026-40478)
|
Cris Staicu |
2026-04-16 |
2,473 |
--
|
|
AI Coding Agent Security Benchmark
|
-- |
2026-04-16 |
400 |
1
|
|
Agent Security League: Evaluating the Security of AI-Coded Software
|
Luca Compagna |
2026-04-15 |
173 |
--
|
|
Is AI Coding Safe? Introducing the Agent Security League
|
Luca Compagna |
2026-04-15 |
2,089 |
--
|
|
The Unkillable C2: How Attackers Are Moving Command and Control to the Blockchain
|
Robert Haynes |
2026-04-13 |
2,808 |
--
|
|
Fable 5.1 takes the top spot — faster than Opus 5, cheaper, and cleaner
|
Luca Compagna |
2026-04-09 |
2,627 |
--
|
|
AI-Generated Malware Risk: A Practical Guide for Developers
|
Endor Labs |
2026-04-09 |
1,740 |
--
|
|
Top 10 SAST Tools in 2026: Accuracy, Speed, and Noise
|
Sarah Hartland |
2026-04-09 |
3,452 |
--
|
|
Root in One Request: Marimo's Critical Pre-Auth RCE (CVE-2026-39987)
|
Kiran Raj |
2026-04-09 |
1,923 |
--
|
|
What Security and Engineering Teams Fear Most About Malware
|
Andrew Stiefel |
2026-04-08 |
1,943 |
--
|
|
Best Application Security Testing (AST) Tools Compared
|
Sarah Hartland |
2026-04-02 |
2,818 |
--
|
|
Best Code Security Platforms in 2026, Compared
|
Sarah Hartland |
2026-04-02 |
2,457 |
--
|
