Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
Blog

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec

Jan 23, 2026
How Fake Font Packages Abused npm as a CDN
Blog

How Fake Font Packages Abused npm as a CDN

Jan 23, 2026
Understanding NPM Worms and the Shai-Hulud Attack
Blog

Understanding NPM Worms and the Shai-Hulud Attack

Nov 25, 2025
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
Blog

StackHawk + Endor Labs: Correlating SAST and DAST Alerts

Nov 20, 2025
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
News
How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder
Blog

How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder

Nov 21, 2025
News
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
Blog

StackHawk + Endor Labs: Correlating SAST and DAST Alerts

Nov 20, 2025
Security
Developer Productivity
AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security
Ebook/Report

AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security

Nov 19, 2025
First Party Code
News
Introducing AI SAST That Thinks Like a Security Engineer
Blog

Introducing AI SAST That Thinks Like a Security Engineer

Nov 19, 2025
Malware
Security
Invisible Threats and the Blind Spots of Security
Ebook/Report

Invisible Threats and the Blind Spots of Security 


Nov 13, 2025
News
Blog

Code-to-Cloud Application Risk Management with Upwind and Endor Labs

Nov 12, 2025
Security
Malware
The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign
Blog

The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign

Nov 11, 2025
Security
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
Blog

Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser

Nov 11, 2025
Open Source
News
Announcing Native Support for OWASP Secure Pipeline Verification Standard
Blog

Announcing Native Support for OWASP Secure Pipeline Verification Standard

Nov 10, 2025
News
Open Source
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
Blog

OWASP Top 10 Adds A03:2025: Software Supply Chain Failures

Nov 6, 2025
Security
Open Source
Malware
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
First Party Code
False Negatives in SAST: Hidden Risks Behind the Noise
Blog

False Negatives in SAST: Hidden Risks Behind the Noise

Nov 6, 2025
No items found.
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
AI/ML
First Party Code
AI Code Gets Less Secure With Every Prompt
Blog

Why AI Code Gets Less Secure With Every Prompt

Oct 28, 2025
First Party Code
Opinion
From Shift Left to Shift Down: Making SAST Work for Developers
Blog

From Shift Left to Shift Down: Making SAST Work for Developers

Oct 27, 2025
Opinion
First Party Code
Why SAST Failed (And What’s Next)
Blog

Why SAST Failed (And What’s Next)

Oct 16, 2025
Security
AI/ML
Learn about CVE-2025-53967, a high-severity RCE vulnerability in Framelink Figma MCP, including mitigation and vetting recommendations.
Blog

CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server

Oct 10, 2025
AI/ML
Tech
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs
Blog

Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs

Oct 2, 2025
Malware
Security
Proactive Protection from Malware Attacks
Solution Brief

Proactive Protection from Malware Attacks

Sep 23, 2025
Open Source
Malware
News
Why Cooldown Windows Belong in Every npm Security Strategy
Blog

Why Cooldown Windows Belong in Every npm Security Strategy

Sep 22, 2025
Open Source
Opinion
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook
Blog

Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook

Sep 22, 2025

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.