Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
Blog

Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise

Feb 11, 2026
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
Blog

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec

Jan 23, 2026
How Fake Font Packages Abused npm as a CDN
Blog

How Fake Font Packages Abused npm as a CDN

Jan 23, 2026
Understanding NPM Worms and the Shai-Hulud Attack
Blog

Understanding NPM Worms and the Shai-Hulud Attack

Nov 25, 2025
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Open Source
Security
Compliance & SBOM
How to Evaluate Endor Labs SCA for C/C++ Projects
Blog

How to Evaluate Endor Labs SCA for C/C++ Projects

Jul 22, 2025
Security
Open Source
Malware
CVE-2025-54313: eslint-config-prettier Compromise — High Severity but Windows-Only
Blog

CVE-2025-54313: eslint-config-prettier Compromise — High Severity but Windows-Only

Jul 19, 2025
Compliance & SBOM
Open Source
Security
Everything You Need To Know About The FedRAMP RFC-0012
Blog

Everything You Need To Know About The FedRAMP RFC-0012

Jul 18, 2025
Developer Productivity
Open Source
Security
Structuring Prompts for Secure Code Generation
Blog

Structuring Prompts for Secure Code Generation

Jul 16, 2025
Security
Open Source
Developer Productivity
Endor Outpost: Deploy Endor Labs Behind Your Firewall
Blog

Endor Outpost: Deploy Endor Labs Behind Your Firewall

Jul 16, 2025
Security
Open Source
Endor Labs & Oligo: Closing the Loop Between Secure Code and Secure Runtime
Blog

Endor Labs & Oligo: Closing the Loop Between Secure Code and Secure Runtime

Jul 10, 2025
Security
Open Source
Struggling to Patch Spring-Web? Try This Instead
Blog

Struggling to Patch Spring-Web? Try This Instead

Jul 9, 2025
Open Source
Security
Compliance & SBOM
SCA
Under the Hood: People.ai's Proactive Approach to AI Security
Blog

Under the Hood: People.ai's Proactive Approach to AI Security

Jul 1, 2025
Open Source
Security
Compliance & SBOM
AI & Blockchain
Tech
People.ai transforms security and compliance with Endor Labs
Customer Story

People.ai Transforms Security and Compliance with Endor Labs

Jul 1, 2025
Open Source
Security
Streamline Investigation with Enriched Vulnerability Search
Blog

Streamline Investigation with Enriched Vulnerability Search

Jun 25, 2025
Open Source
Security
SCA
What is AppSec? A 2025 Guide for Security Practitioners
Blog

What is AppSec? A 2025 Guide for Security Practitioners

Jun 19, 2025
SCA
Open Source
Security
Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis
Ebook/Report

Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis

Jun 18, 2025
SCA
First Party Code
AI/ML
AI & Blockchain
Tech
Mysten Labs Improves DevEx with Endor Labs
Customer Story

Mysten Labs Improves DevEx with Endor Labs

Jun 17, 2025
SCA
Developer Productivity
Under the Hood: Mysten Labs’ Strategies for Building the Most Secure Blockchain
Blog

Under the Hood: Mysten Labs’ Strategies for Building the Most Secure Blockchain

Jun 17, 2025
Open Source
SCA
Devices & Manufacturing
Tech
Zebra Technologies Cuts SCA Noise by 97% with Endor Labs
Customer Story

Zebra Technologies Cuts SCA Noise by 97% with Endor Labs

Jun 11, 2025
SCA
Open Source
Security
Next-Gen SCA for C/C++: Closing the Detection Gap
Blog

Next-Gen SCA for C/C++: Closing the Detection Gap

Jun 11, 2025
Security
AI/ML
Critical SQL Injection Vulnerability in LlamaIndex (CVE-2025-1793) – Advisory and Analysis
Blog

Critical SQL Injection Vulnerability in LlamaIndex (CVE-2025-1793) – Advisory and Analysis

Jun 9, 2025
Open Source
Security
AppSec’s Exploitation Era:What Verizon, Mandiant, and Datadog Are Telling Us
Blog

AppSec’s Exploitation Era: What Verizon, Mandiant, and Datadog Are Telling Us

Jun 4, 2025
First Party Code
Security
Benchmarking Opengrep Performance Improvements
Blog

Benchmarking Opengrep Performance Improvements

May 29, 2025
Security
Open Source
The UK Software Security Code of Practice through a Software Supply Chain Lens
Blog

The UK Software Security Code of Practice through a Software Supply Chain Lens

May 22, 2025
First Party Code
Security
CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass
Blog

CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass

May 20, 2025

Want to stay in the loop?

Sign up for our newsletter.