|
How to Defend Against NPM Software Supply Chain Attacks
|
Jamie Scott |
2025-09-16 |
1,496 |
1
|
|
Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug
|
Andrew Stiefel |
2025-09-08 |
560 |
--
|
|
Nx build platform compromised by supply chain attack – How attackers collude with AI code assistants
|
Henrik Plate |
2025-08-27 |
1,256 |
--
|
|
How We Cracked SCA for C/C++ Codebases
|
Georgios Gousios |
2025-08-21 |
846 |
--
|
|
Shadow AI in Your Codebase: A Hidden Supply Chain Risk
|
Julien Sobrier |
2025-08-20 |
845 |
--
|
|
Cursor Develops a Secure Product with Endor Labs
|
Jenn Gile |
2025-08-20 |
973 |
--
|
|
Five9 Transforms Software Supply Chain Security with Endor Labs
|
Jenn Gile |
2025-08-20 |
1,280 |
--
|
|
Under the Hood: How I Vet Early-Stage Startups for Critical Security Programs
|
Greg Pettengill |
2025-08-20 |
835 |
--
|
|
When CodeRabbit became PwnedRabbit: A cautionary tale for every GitHub App vendor (and their customers)
|
Varun Badhwar |
2025-08-20 |
1,410 |
--
|
|
Detect End-of-Life (EOL) Software in Containers with Endor Labs
|
Pawan Shankar |
2025-08-13 |
402 |
--
|
|
The Most Common Security Vulnerabilities in AI-Generated Code
|
Andrew Stiefel |
2025-08-12 |
411 |
--
|
|
The Last Mile of AI Productivity Is Code Review
|
Varun Badhwar |
2025-08-11 |
910 |
--
|
|
Fireside Chat: CISOs on AI, Shift Left, and Building Trust at People.ai and AppLovin
|
Aman Sirohi |
2025-08-07 |
2,754 |
--
|
|
Fireside Chat: Building a High-Trust Product Security Program at Zebra
|
Jasyn Voshell |
2025-08-06 |
6,255 |
--
|
|
How to Detect LLM Prompt Injection Risks
|
Andrew Stiefel |
2025-08-06 |
598 |
--
|
|
Anti-Pattern Avoidance: A Simple Prompt Pattern for Safer AI-Generated Code
|
Andrew Stiefel |
2025-08-05 |
297 |
--
|
|
Why Your AI Code Assistant Might Be Shipping CVEs
|
Andrew Stiefel |
2025-08-05 |
1,013 |
--
|
|
Endor Labs now integrates with GitHub Copilot in VS Code
|
Jamie Scott |
2025-07-31 |
506 |
--
|
|
Securing AI Coding Assistants: A Total Cost Analysis
|
Varun Badhwar |
2025-07-30 |
1,052 |
--
|
|
Endor Labs Now Available on Google Cloud Marketplace
|
Eli Scherr |
2025-07-29 |
583 |
--
|
|
How to Detect Infrastructure as Code (IaC) Misconfigurations with AI Security Code Review
|
Pawan Shankar |
2025-07-28 |
385 |
--
|
|
Endor Labs now integrates with Cursor AI Code Editor
|
Jamie Scott |
2025-07-24 |
472 |
--
|
|
Secure-Insecure Diff: A Smarter Way to Prompt for Safer Code
|
Andrew Stiefel |
2025-07-22 |
614 |
--
|
|
How to Evaluate Endor Labs SCA for C/C++ Projects
|
Robert Haynes |
2025-07-22 |
1,233 |
--
|
|
CVE-2025-54313: eslint-config-prettier Compromise — High Severity but Windows-Only
|
Security |
2025-07-19 |
711 |
3
|
|
Everything You Need To Know About The FedRAMP RFC-0012
|
Chris Hughes |
2025-07-18 |
1,474 |
--
|
|
Endor Outpost: Deploy Endor Labs Behind Your Firewall
|
Ron Harnik |
2025-07-16 |
699 |
--
|
|
Structuring Prompts for Secure Code Generation
|
Andrew Stiefel |
2025-07-16 |
685 |
--
|
|
Endor Labs & Oligo: Closing the Loop Between Secure Code and Secure Runtime
|
Tom Gleason |
2025-07-10 |
569 |
--
|
|
Struggling to Patch Spring-Web? Try This Instead
|
Somak Dutta |
2025-07-09 |
1,538 |
--
|
|
People.ai Transforms Security and Compliance with Endor Labs
|
Jenn Gile |
2025-07-01 |
1,354 |
--
|
|
Under the Hood: People.ai's Proactive Approach to AI Security
|
Aman Sirohi |
2025-07-01 |
1,224 |
--
|
|
Streamline Investigation with Enriched Vulnerability Search
|
Pawan Shankar |
2025-06-25 |
450 |
--
|
|
What is AppSec? A 2025 Guide for Security Practitioners
|
Sarah Hartland |
2025-06-19 |
2,676 |
--
|
|
Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis
|
Andrew Stiefel |
2025-06-18 |
199 |
--
|
|
Mysten Labs Improves DevEx with Endor Labs
|
Jenn Gile |
2025-06-17 |
1,073 |
--
|
|
Under the Hood: Mysten Labs’ Strategies for Building the Most Secure Blockchain
|
Paul Padilla |
2025-06-17 |
1,379 |
--
|
|
Next-Gen SCA for C/C++: Closing the Detection Gap
|
Julien Sobrier |
2025-06-11 |
855 |
--
|
|
Zebra Technologies Cuts SCA Noise by 97% with Endor Labs
|
Jenn Gile |
2025-06-11 |
797 |
--
|
|
Critical SQL Injection Vulnerability in LlamaIndex (CVE-2025-1793) – Advisory and Analysis
|
Meenakshi S L |
2025-06-09 |
843 |
--
|
|
AppSec’s Exploitation Era: What Verizon, Mandiant, and Datadog Are Telling Us
|
Chris Hughes |
2025-06-04 |
1,514 |
--
|
|
Benchmarking Opengrep Performance Improvements
|
Julien Sobrier |
2025-05-29 |
1,117 |
--
|
|
The UK Software Security Code of Practice through a Software Supply Chain Lens
|
Rob Osborn |
2025-05-22 |
531 |
--
|
|
CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass
|
Meenakshi S L |
2025-05-20 |
861 |
--
|
|
Endor Labs Policies: Developer-Friendly Security Automation
|
Security |
2025-05-19 |
206 |
--
|
|
CVE-2025-4641 is Critical, But Likely Unreachable
|
Ron Harnik |
2025-05-16 |
596 |
--
|
|
Mastering Security Automation: Exception and Remediation Policies
|
Matt Brown |
2025-05-15 |
630 |
--
|
|
5 Tips for Managing Bazel Dependencies (Without Losing Friends)
|
Alexandre Wilhelm |
2025-05-12 |
1,740 |
--
|
|
Why Security Policies Frustrate Developers (and How We Can Fix Them)
|
Matt Brown |
2025-05-06 |
701 |
--
|
|
Open Source Gets Political: What The easyjson Debate Misses (and what to do about it)
|
Ron Harnik |
2025-05-05 |
831 |
--
|
