blog/
68 pages · Updated 2026-10-22
Pages
- Application Security Blog: AppSec News & Insights | Mend.io
- Mend.io Blog: AppSec, AI security, and supply chain - Page 2
- Mend.io Blog: AppSec, AI security, and supply chain - Page 39
- Mend.io Blog: AppSec, AI security, and supply chain - Page 3
- Mend.io Blog: AppSec, AI security, and supply chain - Page 4
- Mend.io Blog: AppSec, AI security, and supply chain
- PHP2Shell: find and fix two critical PHP RCE flaws
- LiteLLM 1.107.0 Compromised: Credential Stealer
- Secure AI agent traffic in Docker Sandboxes with Mend.io
- Renovate Community (OSS) plan: 184 projects upgraded
- NIST SSDF: 4 core practices for secure software development
- What Is AI Governance? A Practical Framework for Security Teams
- AppSec remediation gap: detection scaled, the loop did not
- Managing dependencies at agentic scale with Mend Renovate
- Mini Shai-Hulud Hits openapi-react-query-codegen | Mend.io
- OWASP Agentic Skills Top 10: the enterprise control point
- OWASP LLM Top 10 2026: 3 shifts security teams must act on
- EU AI Act: risk tiers, timeline, and compliance requirements
- That's a wrap: Mend.io at Black Hat USA 2026
- Patch management: why patching smarter beats faster | Mend
- Malicious keyv Package on npm Steals CI Secrets via GitHub
- EU CRA explained: requirements, timeline, and compliance
- AI Guardrails in 2026: Types, Challenges & Agentic AI Impact
- Best SAST Tools in 2026: Top 10 Solutions Ranked
- What Is SAST? Static Application Security Testing
- Best SCA Tools in 2026 & How to Choose the Best One
- AI Application Security: Key Threats, Best Practices & Tools
- Mend.io Launches AI-Native Contextual Project Classification
- Docker image security: encrypt images with containerd
- DevSecOps Explained: Practices, Stages, and Tools
- Black Duck SAST Review: Pros, Cons & Technical Architecture
- SCA for Enterprise: Managing Open Source Risk & Compliance
- Veracode SAST Review: Features, Pricing, Limits
- Code Scanning: Why, How, and the Role in AI Security
- 7 Top SAST Tools for DevSecOps Teams in 2025
- Creating an AI Bill of Materials (AI-BOM) for Secure GenAI
- What Is an SBOM? 4 Key Benefits for Software Security
- What Is AI System Prompt Hardening? A Guide to Securing LLMs
- What Is Software Composition Analysis (SCA)?
- What Is AI Security? Key Threats and How to Stop Them
- Shadow AI: The Silent Security Threat in Your Codebase
- Why AI Red Teaming Is Crucial for Enterprise Security
- 8 Types of Application Security Testing to Know in 2025
- What Is DAST? Dynamic Application Security Testing
- AI governance best practices: 6 controls to extend
- Application Security: Types, Tools, and Practices
- Dependency Management: Automate to Cut Risk
- Software Supply Chain Security: The Basics
- How To Update Node.js To Latest Version
- How to Update Docker Images and Containers
- Vulnerability remediation: a 4-step guide for AppSec teams
- SAST False Positives: Causes, Effects, and How to Fix Them
- A Guide To Implementing Software Supply Chain Risk Management
- SAST vs. SCA: 7 Key Differences
- DevSecOps in an Agile Environment
- How To Transition Your Team From Devops To Devsecops
- Enhance Software Supply Chain Security Using A Zero Trust Model
- How To Manage PHP Dependencies Using Composer
- Devops Vs. Agile: Everything You Need To Know
- How To Use Azure Static Web Apps To Add Azure Functions
- Azure Static Web Apps - a Fresh Offering From Microsoft
- A Comprehensive Guide To Python Dependency Management
- A Comprehensive Guide To Open Source Vulnerability Scanning
- A Comprehensive Guide To Open Source Risks
- Achieving Security & License Compliance In Azure DevOps
- API Security In A Digitally Transformed World
- The 9 Best Code Review Tools for Clean Code
- Source Code Analysis - For Safer Application Development