Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
Blog

Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise

Feb 11, 2026
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
Blog

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec

Jan 23, 2026
How Fake Font Packages Abused npm as a CDN
Blog

How Fake Font Packages Abused npm as a CDN

Jan 23, 2026
Understanding NPM Worms and the Shai-Hulud Attack
Blog

Understanding NPM Worms and the Shai-Hulud Attack

Nov 25, 2025
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Security
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
Blog

Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser

Nov 11, 2025
Open Source
News
Announcing Native Support for OWASP Secure Pipeline Verification Standard
Blog

Announcing Native Support for OWASP Secure Pipeline Verification Standard

Nov 10, 2025
News
Open Source
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
Blog

OWASP Top 10 Adds A03:2025: Software Supply Chain Failures

Nov 6, 2025
Security
Open Source
Malware
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
First Party Code
False Negatives in SAST: Hidden Risks Behind the Noise
Blog

False Negatives in SAST: Hidden Risks Behind the Noise

Nov 6, 2025
No items found.
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
AI/ML
First Party Code
AI Code Gets Less Secure With Every Prompt
Blog

Why AI Code Gets Less Secure With Every Prompt

Oct 28, 2025
First Party Code
Opinion
From Shift Left to Shift Down: Making SAST Work for Developers
Blog

From Shift Left to Shift Down: Making SAST Work for Developers

Oct 27, 2025
Opinion
First Party Code
Why SAST Failed (And What’s Next)
Blog

Why SAST Failed (And What’s Next)

Oct 16, 2025
Security
AI/ML
Learn about CVE-2025-53967, a high-severity RCE vulnerability in Framelink Figma MCP, including mitigation and vetting recommendations.
Blog

CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server

Oct 10, 2025
AI/ML
Tech
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs
Blog

Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs

Oct 2, 2025
Malware
Security
Proactive Protection from Malware Attacks
Solution Brief

Proactive Protection from Malware Attacks

Sep 23, 2025
Open Source
Malware
News
Why Cooldown Windows Belong in Every npm Security Strategy
Blog

Why Cooldown Windows Belong in Every npm Security Strategy

Sep 22, 2025
Open Source
Opinion
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook
Blog

Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook

Sep 22, 2025
Security
Malware
Blog

It’s Time to Take Malware Seriously (Attackers Do)

Sep 19, 2025
Security
SCA
AI/ML
Malware
Fireside Chat: Building an AppSec Program for Cursor
Video

Fireside Chat: Building an AppSec Program for Cursor

Sep 19, 2025
No items found.
Ebook/Report

A Practical Guide to AI and Application Security

Sep 19, 2025
Open Source
Security
Malware
How to Defend Against NPM Software Supply Chain Attacks
Blog

How to Defend Against NPM Software Supply Chain Attacks

Sep 16, 2025
Security
News
Open Source
Malware
A virus-like npm malware attack has spread to 180+ packages so far, including CrowdStrike and Tinycolor.
Blog

npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised

Sep 16, 2025
AI/ML
News
Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC
Blog

Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC

Sep 16, 2025
Security
Open Source
Malware
Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug
Blog

Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug

Sep 8, 2025

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.