|
AI SAST in Action: Finding Real Vulnerabilities in OpenClaw
|
Peyton Kennedy |
2026-02-10 |
696 |
--
|
|
Design Flaws in AI Generated Code
|
Andrew Stiefel |
2026-02-09 |
1,094 |
--
|
|
The Architectural Shift Behind the AI SDLC
|
Aditya Patil |
2026-02-06 |
774 |
--
|
|
Test-First Prompting: Using TDD for Secure AI-Generated Code
|
Jenn Gile |
2026-02-04 |
855 |
--
|
|
CVE-2026-25049 Expression Escape Vulnerability Leading to RCE in n8n
|
Cris Staicu |
2026-02-04 |
1,645 |
--
|
|
Static Analysis in the Age of AI, Part I: AI Coding Assistants
|
Robert Haynes |
2026-02-03 |
1,012 |
--
|
|
7 Snyk Alternatives for Engineering Teams in 2026
|
Developer Productivity |
2026-02-02 |
3,716 |
--
|
|
npm Account Takeovers are a Growing Malware Trend
|
Jenn Gile |
2026-01-29 |
2,311 |
--
|
|
CVE-2026-22709: Critical Sandbox Escape in vm2 Enables Arbitrary Code Execution
|
Peyton Kennedy |
2026-01-27 |
1,712 |
4
|
|
How Fake Font Packages Abused npm as a CDN
|
Henrik Plate |
2026-01-23 |
1,244 |
--
|
|
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
|
Peyton Kennedy |
2026-01-23 |
1,469 |
--
|
|
Your Next Breach Won’t Be a CVE: Connecting Real Incidents to AI-Aware Code Review
|
Matt Brown |
2026-01-21 |
1,684 |
--
|
|
Astronomer Modernizes AppSec with Endor Labs
|
Jenn Gile |
2026-01-20 |
1,100 |
--
|
|
Eight for One: Multiple Vulnerabilities Fixed in the Node.js Runtime
|
Peyton Kennedy |
2026-01-13 |
1,311 |
--
|
|
n8mare on auth street: supply chain attack targets n8n ecosystem
|
Kiran Raj |
2026-01-09 |
1,708 |
--
|
|
CVE-2025-12543: Host Header Validation Bypass in Undertow
|
Meenakshi S L |
2026-01-09 |
812 |
--
|
|
CVE-2025-68428: Critical Path Traversal in jsPDF
|
Peyton Kennedy |
2026-01-06 |
1,078 |
--
|
|
Bringing Malware Detection Into AI Coding Workflows with Cursor Hooks
|
George Apostolopoulos |
2025-12-17 |
1,058 |
--
|
|
When Regex Isn’t Enough: How We Discovered CVE-2025-13780 in pgAdmin
|
Meenakshi S L |
2025-12-12 |
1,258 |
--
|
|
When a Broken Fix Leads to RCE: How We Found CVE-2025-66626 in Argo
|
Meenakshi S L |
2025-12-12 |
1,136 |
--
|
|
From Vision to Reality: How Endor Labs Delivers Developer-First Security
|
Robert Haynes |
2025-12-09 |
1,189 |
--
|
|
Developer Experience: The Key to Successful Security
|
Robert Haynes |
2025-12-09 |
2,293 |
--
|
|
Critical Remote Code Execution (RCE) Vulnerabilities in React and Next.js
|
Henrik Plate |
2025-12-03 |
1,037 |
--
|
|
Rubrik Hits Aggressive SLAs via Endor Labs
|
Jenn Gile |
2025-12-02 |
1,415 |
--
|
|
Understanding NPM Worms and the Shai-Hulud Attack
|
Robert Haynes |
2025-11-25 |
1,563 |
--
|
|
Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime
|
Henrik Plate |
2025-11-24 |
2,479 |
--
|
|
How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder
|
Aya Estrin |
2025-11-21 |
1,157 |
--
|
|
The OWASP Top 10 Gets Modernized
|
Chris Hughes |
2025-11-21 |
1,426 |
--
|
|
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
|
Eli Scherr |
2025-11-20 |
488 |
--
|
|
Introducing AI SAST That Thinks Like a Security Engineer
|
Amod Gupta |
2025-11-19 |
1,444 |
--
|
|
AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security
|
Security |
2025-11-19 |
210 |
--
|
|
Code-to-Cloud Application Risk Management with Upwind and Endor Labs
|
Eli Scherr |
2025-11-12 |
498 |
--
|
|
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
|
Cris Staicu |
2025-11-11 |
1,911 |
--
|
|
The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign
|
Cris Staicu |
2025-11-11 |
1,909 |
2
|
|
Announcing Native Support for OWASP Secure Pipeline Verification Standard
|
Amod Gupta |
2025-11-10 |
1,154 |
--
|
|
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
|
Meenakshi S L |
2025-11-06 |
885 |
--
|
|
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
|
Jenn Gile |
2025-11-06 |
838 |
--
|
|
False Negatives in SAST: Hidden Risks Behind the Noise
|
Andrew Stiefel |
2025-11-06 |
951 |
--
|
|
Why AI Code Gets Less Secure With Every Prompt
|
Chris Hughes |
2025-10-28 |
1,054 |
--
|
|
From Shift Left to Shift Down: Making SAST Work for Developers
|
Andrew Stiefel |
2025-10-27 |
1,407 |
--
|
|
Why SAST Failed (And What’s Next)
|
Dimitri Stiliadis |
2025-10-16 |
1,040 |
--
|
|
CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server
|
Jenn Gile |
2025-10-10 |
1,162 |
--
|
|
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs
|
Karen Ng |
2025-10-02 |
814 |
--
|
|
Proactive Protection from Malware Attacks
|
Malware |
2025-09-23 |
438 |
--
|
|
Why Cooldown Windows Belong in Every npm Security Strategy
|
Camilla Odlund |
2025-09-22 |
888 |
--
|
|
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook
|
Varun Badhwar |
2025-09-22 |
1,437 |
--
|
|
Fireside Chat: Building an AppSec Program for Cursor
|
Jenn Gile |
2025-09-19 |
7,125 |
--
|
|
It’s Time to Take Malware Seriously (Attackers Do)
|
Jenn Gile |
2025-09-19 |
1,704 |
--
|
|
npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised
|
Henrik Plate |
2025-09-16 |
972 |
--
|
|
Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC
|
AI/ML |
2025-09-16 |
864 |
--
|
