Mend.io Blog

Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.

Learn about the 3 critical best practices of software supply chain security to protect your organization from malicious packages.

Learn about the latest GitHub features to enhance your code security and dependency management. Stay ahead of vulnerabilities.

Learn about Cloud Security Architecture. Understand the importance, core principles, and threats to secure your cloud environment effectively.

Discover how Mend Supply Chain Defender integrates with JFrog Artifactory to block malicious software threats in your code base.

Learn how Mend is bringing RSA 2022’s “transform” theme to life with its own transformation, what that means for customers, and what we’re anticipating from the conference.

From WhiteSource to Mend—A Rebrand Journey. Follow our evolution from open source to all code application security.

Mend, formerly WhiteSource, focuses on automating application security with a remediation-first approach for open source and custom code.

Practical guide to vulnerability remediation for developers & security teams. Learn how to detect, prioritize, fix, & monitor vulnerabilities.

Discover the latest typosquatting attack on the npm package 'colors' using a cross-language technique.

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Discover the NIST Supply Chain Risk Management Program.. Learn how to manage cybersecurity risks in digital supply chains effectively.

Learn why vulnerability management must go beyond CVSS to priority scoring for better open source security and remediation prioritization.

Discover how AWS was targeted by a malicious package backfill attack, the methods used by attackers, and how to protect against such attacks.

Discover the top 5 vulnerability assessment scanning tools and learn how to prioritize and remediate vulnerabilities to secure your org.

Discover how threat actors are using hex encoding and delayed execution to deploy malicious packages. Learn how to protect your applications.