Mend.io Application Security

shrinking security debt with dependency management white paper

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Read More
learning from history gender bias in ai

Learning From History: AI Gender Bias

Learn about AI gender bias in large language models, how historical data impacts AI, & implications for women in health & car safety fields.

Read More
container security creating an effective security program with reachability analysis

Container Security: Creating an Effective Security Program with Reachability Analysis

Learn how to create an effective container security program with reachability analysis to protect your applications from vulnerabilities.

Read More
container blog

Mend.io Launches Mend Container

Mend.io launches Mend Container to address security in cloud-native development, offering reachability analysis and secrets detection.

Read More
broken nvd

Breaking: What is Going on with the NVD? Does it Affect Me?

Learn about the current issues with the National Vulnerability Database, how it affects vulnerability reporting, and how Mend SCA can help.

Read More
what is the difference between an sca scan and a container scan

What is the difference between an SCA scan and a container scan?

Learn about the difference between SCA scans and container scans, why scanning containers for vulnerabilities is important.

Read More
how is a container scan done

How is a Container Scan Done?

Learn the importance of scanning container images for vulnerabilities to keep your containerized environments safe.

Read More
secrets management vs secrets detection what you need to know

Secrets Management vs Secrets Detection: Here’s What You Need to Know

Learn about the importance of secrets management vs secrets detection in application security. Protect your sensitive data.

Read More
cvss4 is here how to make the most of it

CVSS 4.0 is Here: How to Make the Most of It

Learn about the latest version of CVSS 4.0. Understand the new metrics and how to use them in your org's vulnerability remediation strategy.

Read More
SAST Quality Quantity how to get the most out of sast

Quality > Quantity: How to Get the Most Out of SAST

Learn how to make the most out of Static Application Security Testing (SAST) without overwhelming developers.

Read More
blog what existing security threats do AI and LLMs amplify

What Existing Security Threats Do AI and LLMs Amplify? What Can We Do About Them?

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Read More
guide to using epss scores

Mend’s Handy Guide to Using EPSS Scores

Discover Mend's Handy Guide to Using EPSS Scores. Learn how EPSS can predict exploits and prioritize vulnerability remediation effectively.

Read More
6 more top tips for holistic appsec and software supply chain security

Six More Top Tips For Holistic AppSec and Software Supply Chain Security

Learn how to strengthen your security posture with holistic approaches to application security and software supply chain security.

Read More
6 top tips for holistic appsec and software supply chain security

Six Top Tips For Holistic AppSec and Software Supply Chain Security

Discover six top tips for holistic application security and software supply chain security for long-term success.

Read More
building security culture starts with building relationships

Building a Security Culture Starts with Building Relationships

Learn how building relationships between security and development teams can improve application security. Find key tactics for security.

Read More
what new security threats arise from the boom in ai and llms

What New Security Threats Arise from The Boom in AI and LLMs?

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.

Read More