Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Ebook/Report

A Practitioner’s Guide to Responding to the TeamPCP Supply Chain Attacks

Mar 27, 2026
AURI: Security Intelligence for Agentic Software Development
Solution Brief

AURI: Security Intelligence for Agentic Software Development

Mar 19, 2026
How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability
Blog

How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability

Mar 13, 2026
Introducing AURI: Security Intelligence for AI Coding Agents and Developers
Blog

Introducing AURI: Security Intelligence for AI Coding Agents and Developers

Mar 3, 2026
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
News
Open Source
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
Blog

OWASP Top 10 Adds A03:2025: Software Supply Chain Failures

Nov 6, 2025
Security
Open Source
Malware
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
First Party Code
False Negatives in SAST: Hidden Risks Behind the Noise
Blog

False Negatives in SAST: Hidden Risks Behind the Noise

Nov 6, 2025
No items found.
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
AI/ML
First Party Code
AI Code Gets Less Secure With Every Prompt
Blog

Why AI Code Gets Less Secure With Every Prompt

Oct 28, 2025
First Party Code
Opinion
From Shift Left to Shift Down: Making SAST Work for Developers
Blog

From Shift Left to Shift Down: Making SAST Work for Developers

Oct 27, 2025
Opinion
First Party Code
Why SAST Failed (And What’s Next)
Blog

Why SAST Failed (And What’s Next)

Oct 16, 2025
Security
AI/ML
Learn about CVE-2025-53967, a high-severity RCE vulnerability in Framelink Figma MCP, including mitigation and vetting recommendations.
Blog

CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server

Oct 10, 2025
AI/ML
Tech
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs
Blog

Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs

Oct 2, 2025
Malware
Security
Proactive Protection from Malware Attacks
Solution Brief

Proactive Protection from Malware Attacks

Sep 23, 2025
Open Source
Malware
News
Why Cooldown Windows Belong in Every npm Security Strategy
Blog

Why Cooldown Windows Belong in Every npm Security Strategy

Sep 22, 2025
Open Source
Opinion
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook
Blog

Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook

Sep 22, 2025
Security
Malware
Blog

It’s Time to Take Malware Seriously (Attackers Do)

Sep 19, 2025
Security
SCA
AI/ML
Malware
Fireside Chat: Building an AppSec Program for Cursor
Video

Fireside Chat: Building an AppSec Program for Cursor

Sep 19, 2025
No items found.
Ebook/Report

A Practical Guide to AI and Application Security

Sep 19, 2025
Open Source
Security
Malware
How to Defend Against NPM Software Supply Chain Attacks
Blog

How to Defend Against NPM Software Supply Chain Attacks

Sep 16, 2025
Security
News
Open Source
Malware
A virus-like npm malware attack has spread to 180+ packages so far, including CrowdStrike and Tinycolor.
Blog

npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised

Sep 16, 2025
AI/ML
News
Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC
Blog

Endor Labs Drives 225% Revenue Growth, Pioneers the Future of Secure SDLC

Sep 16, 2025
Security
Open Source
Malware
Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug
Blog

Major Supply Chain Attack Compromises Popular npm Packages Including chalk and debug

Sep 8, 2025
Security
Malware
Blog

Nx build platform compromised by supply chain attack – How attackers collude with AI code assistants

Aug 27, 2025
No items found.
How We Cracked SCA for C/C++ Codebases
Blog

How We Cracked SCA for C/C++ Codebases

Aug 21, 2025

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.