Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
A virus-like npm malware attack has spread to 180+ packages so far, including CrowdStrike and Tinycolor.
Blog

npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised

Sep 16, 2025
AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale
Ebook/Report

AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale

Apr 23, 2025
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
News
Blog

Code-to-Cloud Application Risk Management with Upwind and Endor Labs

Nov 12, 2025
Security
The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign
Blog

The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign

Nov 11, 2025
Security
Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser
Blog

Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser

Nov 11, 2025
Open Source
News
Announcing Native Support for OWASP Secure Pipeline Verification Standard
Blog

Announcing Native Support for OWASP Secure Pipeline Verification Standard

Nov 10, 2025
News
Open Source
OWASP Top 10 Adds A03:2025: Software Supply Chain Failures
Blog

OWASP Top 10 Adds A03:2025: Software Supply Chain Failures

Nov 6, 2025
Security
Open Source
Malware
Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
First Party Code
False Negatives in SAST: Hidden Risks Behind the Noise
Blog

False Negatives in SAST: Hidden Risks Behind the Noise

Nov 6, 2025
No items found.
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
AI/ML
First Party Code
AI Code Gets Less Secure With Every Prompt
Blog

Why AI Code Gets Less Secure With Every Prompt

Oct 28, 2025
First Party Code
Opinion
From Shift Left to Shift Down: Making SAST Work for Developers
Blog

From Shift Left to Shift Down: Making SAST Work for Developers

Oct 27, 2025
Opinion
First Party Code
Why SAST Failed (And What’s Next)
Blog

Why SAST Failed (And What’s Next)

Oct 16, 2025
Security
AI/ML
Learn about CVE-2025-53967, a high-severity RCE vulnerability in Framelink Figma MCP, including mitigation and vetting recommendations.
Blog

CVE-2025-53967 Remote Code Execution in Framelink Figma MCP Server

Oct 10, 2025
AI/ML
Tech
Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs
Blog

Rethinking the Interface: How Agentic UX is Shaping the Future of Endor Labs

Oct 2, 2025
Malware
Security
Proactive Protection from Malware Attacks
Solution Brief

Proactive Protection from Malware Attacks

Sep 23, 2025
Open Source
Malware
News
Why Cooldown Windows Belong in Every npm Security Strategy
Blog

Why Cooldown Windows Belong in Every npm Security Strategy

Sep 22, 2025
Open Source
Opinion
Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook
Blog

Zero Trust for Open Source: Why Enterprises Need a New AppSec Playbook

Sep 22, 2025
Security
Malware
Blog

It’s Time to Take Malware Seriously (Attackers Do)

Sep 19, 2025
Security
SCA
AI/ML
Malware
Fireside Chat: Building an AppSec Program for Cursor
Video

Fireside Chat: Building an AppSec Program for Cursor

Sep 19, 2025
No items found.
Ebook/Report

A Practical Guide to AI and Application Security

Sep 19, 2025
Open Source
Security
Malware
How to Defend Against NPM Software Supply Chain Attacks
Blog

How to Defend Against NPM Software Supply Chain Attacks

Sep 16, 2025
Security
News
Open Source
Malware
A virus-like npm malware attack has spread to 180+ packages so far, including CrowdStrike and Tinycolor.
Blog

npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised

Sep 16, 2025
no-results
Sorry, no results matching your search.

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.