Learn

Learn about software supply chain security and Endor Labs.

Featured resources

AURI: Security Intelligence for Agentic Software Development
Solution Brief

AURI: Security Intelligence for Agentic Software Development

Mar 19, 2026
How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability
Blog

How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability

Mar 13, 2026
Introducing AURI: Security Intelligence for AI Coding Agents and Developers
Blog

Introducing AURI: Security Intelligence for AI Coding Agents and Developers

Mar 3, 2026
How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities
Blog

How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities

Feb 18, 2026
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Security
Open Source
CVE-2025-55182
Blog

Critical Remote Code Execution (RCE) Vulnerabilities in React and Next.js

Dec 3, 2025
No items found.
Ebook/Report

The New era of Code-to-Cloud Security

Dec 2, 2025
Customer Stories
SCA
Tech
Compliance & SBOM
Malware
Rubrik Hits Aggressive SLAs via Endor Labs
Customer Story

Rubrik Hits Aggressive SLAs via Endor Labs

Dec 2, 2025
Malware
Understanding NPM Worms and the Shai-Hulud Attack
Blog

Understanding NPM Worms and the Shai-Hulud Attack

Nov 25, 2025
Security
News
Malware
Blog

Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime

Nov 24, 2025
Open Source
News
The OWASP Top 10 Gets Modernized
Blog

The OWASP Top 10 Gets Modernized

Nov 21, 2025
News
How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder
Blog

How Endor Labs Is Supporting Bryce, a Next-Gen AppSec Builder

Nov 21, 2025
News
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
Blog

StackHawk + Endor Labs: Correlating SAST and DAST Alerts

Nov 20, 2025
Security
Developer Productivity
AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security
Ebook/Report

AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security

Nov 19, 2025
First Party Code
News
Introducing AI SAST That Thinks Like a Security Engineer
Blog

Introducing AI SAST That Thinks Like a Security Engineer

Nov 19, 2025
Malware
Security
Invisible Threats and the Blind Spots of Security
Ebook/Report

Invisible Threats and the Blind Spots of Security 


Nov 13, 2025
News
Blog

Code-to-Cloud Application Risk Management with Upwind and Endor Labs

Nov 12, 2025
Security
Malware
The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign
Blog

The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign

Nov 11, 2025
Security
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
Blog

Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser

Nov 11, 2025
Open Source
News
Announcing Native Support for OWASP Secure Pipeline Verification Standard
Blog

Announcing Native Support for OWASP Secure Pipeline Verification Standard

Nov 10, 2025
News
Open Source
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
Blog

OWASP Top 10 Adds A03:2025: Software Supply Chain Failures

Nov 6, 2025
Security
Open Source
Malware
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
First Party Code
False Negatives in SAST: Hidden Risks Behind the Noise
Blog

False Negatives in SAST: Hidden Risks Behind the Noise

Nov 6, 2025
No items found.
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
AI/ML
First Party Code
AI Code Gets Less Secure With Every Prompt
Blog

Why AI Code Gets Less Secure With Every Prompt

Oct 28, 2025
First Party Code
Opinion
From Shift Left to Shift Down: Making SAST Work for Developers
Blog

From Shift Left to Shift Down: Making SAST Work for Developers

Oct 27, 2025

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.