Search Results

LiteLLM 1.107.0 Compromised: Python Startup Hooks Steal Cloud, AI, and Proxy Credentials

PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the slowest and most expensive recent frontier combo we have tested.

Run Endor Labs AI SAST on your own approved LLM provider.

Endor Labs and Bright Security Partner to Close the Gap Between Discovery and Remediation

Endor Labs + SpaceXSI: Building the security foundation for agentic coding

A compromised release of the nx build package shipped a post-install script that did something the industry had not seen before.

Nine days after GPT-6 Sol, Codex with GPT-6.1 Sol scores 77.7% FuncPass and 34.1% SecPass — within one task of GPT-6 Astra on security, a third faster, and with zero confirmed cheating.

Sandboxes Explained: What Each Type Actually Isolates

Codex with GPT-6 Sol scores 72.1% FuncPass and 25.1% SecPass for $104 on Azure — 78% cheaper than Astra ($468) — with zero confirmed cheating.

Endor Labs was recently featured in the Gartner® report First Take: Claude Code Is Defaulting to Automated Permissions — Update Your Governance Controls, published August 24, 2026. The report examines an important change in how Claude Code handles permissions and the broader governance implications as coding agents take more actions without requiring a developer to approve each one.

Claude Code with Opus 5.5 finishes coding tasks in a median of 2.2 minutes for $116 in total, the fastest run on our board and the cheapest Anthropic run by far, but lands at only 33.5% for secure code.

Engineering a security harness for AI coding agents

The first part of the EU Cyber Resiliency Act comes into effect on September 11th. Are you Ready?

Learn how Endor Labs detects malicious VS Code extensions and poisoned updates and blocks them with Package Firewall before they reach developer workstations.

Threat Center and Package Firewall for VS Code Extensions

Agent fixes got 47% cheaper to generate. Review still costs ten times more.

GPT-6 Astra on Codex - the Biggest Codex Leap to Date

How Endor Labs AI SAST Learns What Matters to Your Organization

From SDLC to ADLC: why application security needs coding agent governance

Hooks are the control plane for the agentic development lifecycle

The real test of AI-native code analysis: is your security debt shrinking?

FedRAMP 2026 vulnerability rules make reachability a requirement

Customer Zero: Implementing Package Firewall at Endor Labs

How JavaScript Sandboxes Work

GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm

Why C Has Always Broken Static Analysis

Why Endor Labs AI SAST for C finds what other tools miss

Hacking your life with AI can get you hacked

How AI orchestration platforms ship RCE by design

When you can't upgrade: open source examples of Endor Patches

How Endor Labs AI SAST combines program analysis, agentic reasoning, and deterministic engineering to find and fix the flaws that matter in AI-written code.

CISO's Guide: Build vs Buy AI Code Security

Why NPM Malware Keeps Reaching for Bun | Supply Chain Security

Best in Class, Novel in Method: Opus 5 and the Recall-Then-Diverge Pattern

Endor Labs for Connected Products

Endor Labs for Software & Tech

Endor Labs for Financial Services

SBOM Hub & VEX

Endor Patches

Artifact Signing

AI Model Governance

AI Code Review

Container Security & Reachability

AI Coding Agent Governance: The Security Layer for the Agentic SDLC

Package Firewall

Secrets Detection: Find the Secrets That Are Actually Live

Software Supply Chain Security

AI Code Governance: Secure AI-Generated Code and Govern the Agents That Write It

Agentic Remediation: Remediation at Machine Speed, Grounded in Security Context

Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Application Security

The OpenAI and Hugging Face security incident: why AI agents need deterministic guardrails

Beyond MCP: The New Security Playbook for Coding Agents

OpenAI Codex with GPT-5.6 Sol: competitive, zero cheating, one unique Django fix

Everyone Wins Their Own Benchmark

Sonnet 5 vs Fable 5: reliable versus security-forward, not better versus worse

Claude Sonnet 5 with Cursor: strong reasoning, throttled by the harness

Egnyte Accelerates FedRAMP & Protects Engineering Velocity with Endor Labs

Cyber insurers are pricing based on patching speed

Endor Labs Named in the 2026 Gartner® Hype Cycle™ for Secure Software Engineering

Claude Sonnet 5 with Claude Code: strong on function, average on security, and unusually honest

Endor Labs’ AI SAST Finds CVE-2026-55407: Memory-Amplification DoS in buffa

AI SAST found 192 real vulnerabilities, 2.6x more than Claude Code

Endor Labs is a Visionary in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

Claude Fable 5, take two: same model, different harness, and a very different result

AppSec was built to find problems. The Mythos era demands you fix them, fast.

A single hijacked maintainer account pushed multiple trojanized packages across the entire @mastra scope in 27 minutes, each carrying a typosquat dependency that runs a remote payload on install. Combined reach is over 28 million downloads a month.

A controlled benchmark of AI agents with and without access to deterministic tools for performing common security tasks

The token economics of using AI coding agents for security tasks

Average results with 59.8% on functional solves and just 19.0% on security solves

Recall, not reasoning: how AI coding agents cheat security benchmarks

Endor Labs Named a Representative Vendor in the 2026 Gartner® Innovation Insight for Agentic Application Security Testing

Shai-Hulud "Hades" Wave Hits Six PyPI Bioinformatics Packages

Malicious Payload in ai-sdk-ollama npm Package

Endor Labs Recognized in the Forrester Agentic Development Security Tools Landscape

Endor Labs + Cursor: Building the security foundation for agentic coding

Designing Reports for Three Different Workflows

Endor Labs named a Representative Vendor for Software Supply Chain Security.

Malicious PyPI package durabletask 1.4.1-1.4.3 steals AWS, Azure, and GCP credentials on import. 417k monthly downloads affected.

Endor Labs and Chainguard Partner to Deliver End-to-End Software Supply Chain Security

Mini Shai-Hulud Returns: 42 Malicious npm Packages Fake Sigstore Badges in AntV Ecosystem Attack

Designing AI Coding Agent Governance: A New Surface for AI Risk

When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms

Endor Labs joins the Wiz Integration Network (WIN), bringing reachability-backed SCA and AI SAST to Wiz for unified code-to-cloud risk context.

A technical explainer of the attack chain behind the May 11, 2026 TanStack compromise

Learn how hooks turn AI coding agents like Claude Code and Cursor into governed systems with deterministic policy, centralized audit, and defense in depth.