Mend.io

Another Black Hat USA is in the books, and what a week it was. From a main stage keynote at the AI Summit to candid podcast conversations, a video interview with Cyber Defense Magazine, and a booth game that just wouldn't quit, Mend.io showed up in Las Ve

The 30-day patch cycle is dead. Most security teams already know this. What they haven't fully reckoned with is why it died, and what has to replace it. SC Media recently gathered a range of security leaders on exactly this shift, and the picture they des

On August 4, 2026, a malicious version of keyv was published to npm as [email protected], one of a number of npm packages affected across the Keyv and Cacheable ecosystem. The release follows the Mini Shai-Hulud pattern: a trojanized version of a heavily depende

AI didn't just change how fast you ship. It changed what your AI application security program has to protect.Two years ago, security teams protected code, open source, and containers. Today they also have to protect AI agents, MCP servers, models, prompts

TL;DR: AI security testing solutions find vulnerabilities in code, dependencies, and AI components across the dev pipeline.What are AI security testing solutions?AI security testing solutions protect CI/CD pipelines from two critical angles: securing the

Mend.io's research team caught this campaign before most of the open source community ever saw it. Continuous monitoring of RubyGems flagged a batch of gems that looked, at a glance, like an ordinary cryptomining squat, and Mend.io reported the full batch

What are AI security posture management (AI-SPM) platforms?AI Security Posture Management (AI-SPM) platforms are specialized tools that discover, monitor, and secure AI models, pipelines, and data, mitigating risks like data leakage and model poisoning. T

TL;DR: Application security testing tools find vulnerabilities in code, dependencies, and configs across the software development lifecycle. Best for: Mend.io for unified SAST and SCA, Snyk for developer workflows, Veracode for enterprise scale, SonarQube

Why the independent layer keeps winning as the models get better, not despite them.This series has been building to one question, and it is the objection every honest reader has been holding since the first piece. If the frontier models keep getting bette