learn/

📄 Shai-Hulud compromises the @tanstack ecosystem: 80+ packages compromised | Endor Labs 2,896w HTML · MD

📄 AI-Supported Debugging: How Endor Labs Fixes Broken Builds | Endor Labs 1,350w HTML · MD

📄 Sandboxes Explained: What Each Type Actually Isolates | Endor Labs 2,065w HTML · MD

📄 Test-First Prompting: Using TDD for Secure AI-Generated Code | Endor Labs 925w HTML · MD

📄 How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities | Endor Labs 2,664w HTML · MD

📄 What is CI/CD Security and What Tools Do You Need to Do it? | Endor Labs 1,518w HTML · MD

📄 Meet the application security platform built for the AI era | Endor Labs 1,894w HTML · MD

📄 Endor Labs’ ‘State of Dependency Management 2023’ Report Offers Insight on Explosive Popularity of AI and LLMs—and How They Impact Application Security | Endor Labs 534w HTML · MD

📄 Your Next Breach Won’t Be a CVE: Connecting Real Incidents to AI-Aware Code Review | Endor Labs 1,464w HTML · MD

📄 Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Endor Labs 1,564w HTML · MD

📄 Five9 Transforms Software Supply Chain Security with Endor Labs | Endor Labs 1,133w HTML · MD

📄 Grip Security Builds Customer Trust with AppSec | Endor Labs 1,847w HTML · MD

📄 FedRAMP 2026 vulnerability rules make reachability a requirement | Endor Labs 413w HTML · MD

📄 npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised | Endor Labs 3,768w HTML · MD

📄 Microsoft Defender for Cloud Natively Integrates with Endor Labs | Endor Labs 1,025w HTML · MD

📄 OWASP OSS Risk 1: Known Vulnerabilities | Endor Labs 3,119w HTML · MD

📄 State of Dependency Management 2023 | Endor Labs 760w HTML · MD

📄 SBOM Requirements for Medical Devices | Endor Labs 1,082w HTML · MD

📄 tech 226w HTML · MD

📄 Endor Labs & Github Advanced Security: AppSec Without The Productivity Tax | Endor Labs 1,511w HTML · MD

📄 Benchmarking Endor Labs vs. Snyk’s GitHub Apps | Endor Labs 1,083w HTML · MD

📄 Understanding Python Manifest Files | Endor Labs 1,008w HTML · MD

📄 Surge in submissions forces NIST to change how it handles CVEs. Here's what it means for vulnerability management. | Endor Labs 924w HTML · MD

📄 opinion 310w HTML · MD

📄 How to Discover Open Source AI Models in Your Code | Endor Labs 1,339w HTML · MD

📄 Bringing Malware Detection Into AI Coding Workflows With… | Endor Labs 1,151w HTML · MD

📄 Introducing CI/CD Security with Endor Labs | Endor Labs 1,222w HTML · MD

📄 The AppSec Maturity Staircase: Climbing Faster, Not Harder with Endor Labs | Endor Labs 569w HTML · MD

📄 Why Security Policies Frustrate Developers (and How We Can Fix Them) | Endor Labs 711w HTML · MD

📄 Once Upon a Codebase: An AppSec Bedtime Story | Endor Labs 2,590w HTML · MD

📄 Shai-Hulud Strikes Leo Platform npm | Endor Labs 1,519w HTML · MD

📄 The Missing Layer: Why Container OS Libraries Need Reachability Analysis | Endor Labs 1,775w HTML · MD

📄 Introducing AI Coding Agent Governance: Using Hooks to Bring Visibility to the ADLC | Endor Labs 1,685w HTML · MD

📄 Nx build platform compromised by supply chain attack – How attackers collude with AI code assistants | Endor Labs 1,143w HTML · MD

📄 Surprise Your Github Actions Are Dependencies Too |… | Endor Labs 1,571w HTML · MD

📄 AppSec was built to find problems. The Mythos era demands you fix them, fast. | Endor Labs 1,222w HTML · MD

📄 Introducing AURI: Security Intelligence for AI Coding Agents and Developers | Endor Labs 899w HTML · MD

📄 Mini Shai-Hulud worm hits openapi-react-query-codegen, spreads across npm, RubyGems, and PyPI | Endor Labs 699w HTML · MD

📄 The Token Economics of AI AppSec Agents | Endor Labs 343w HTML · MD

📄 developer-productivity 239w HTML · MD

📄 Why SCA Tools Can't Agree if Something is a CVE | Endor Labs 786w HTML · MD

📄 Introduction to Program Analysis | Endor Labs 1,105w HTML · MD

📄 Agent Security League: Evaluating the Security of AI-Coded Software | Endor Labs 8,832w HTML · MD

📄 AI AppSec Maturity Model: Build vs. Buy Guide | Endor Labs 462w HTML · MD

📄 Shadow Pipelines: The DevOps Security Risk Nobody Owns | Endor Labs 2,238w HTML · MD

📄 How CycloneDX VEX Makes Your SBOM Useful | Endor Labs 2,510w HTML · MD

📄 Learn how Endor Labs detects malicious VS Code extensions | Endor Labs 764w HTML · MD

📄 What Breaking Changes Teach Us about Security | Endor Labs 903w HTML · MD

📄 How Should I Prioritize Software Vulnerabilities? | Endor Labs 756w HTML · MD

📄 Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive | Endor Labs 1,193w HTML · MD

📄 Benchmarking Endor Labs AI SAST: 2.6x more real vulnerabilities found than frontier models | Endor Labs 1,864w HTML · MD

📄 Cursor Develops A Secure Product With Endor Labs |… | Endor Labs 820w HTML · MD

📄 5 Types of Reachability Analysis (and Which is Right for You) | Endor Labs 1,356w HTML · MD

📄 Breaking Changes, Breaking Trust | Endor Labs 1,700w HTML · MD

📄 Egnyte Accelerates FedRAMP & Protects Engineering Velocity with Endor Labs | Endor Labs 1,635w HTML · MD

📄 Astronomer Modernizes AppSec with Endor Labs | Endor Labs 980w HTML · MD

📄 How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability | Endor Labs 1,544w HTML · MD

📄 How to Defend Against NPM Software Supply Chain Attacks | Endor Labs 1,393w HTML · MD

📄 security 226w HTML · MD

📄 ai-ml 299w HTML · MD

📄 Struggling to Patch Spring-Web? Try This Instead | Endor Labs 974w HTML · MD

📄 Organizational Behavior Predicts OSS Malware Program Success | Endor Labs 994w HTML · MD

📄 Recall, not reasoning: how AI coding agents cheat security benchmarks | Endor Labs 1,780w HTML · MD

📄 Is AI Coding Safe? Introducing the Agent Security League | Endor Labs 2,045w HTML · MD

📄 Understanding the Cyber Resilience Act | Endor Labs 2,004w HTML · MD

📄 npm is serving malware to 134,000 developers, and the maintainer can’t stop it | Endor Labs 759w HTML · MD

📄 State of Dependency Management 2022 | Endor Labs 1,832w HTML · MD

📄 CVE-2026-25896: Entity Encoding Bypass in fast-xml-parser | Endor Labs 868w HTML · MD

📄 Identifying and Tracking FedRAMP False Positives | Endor Labs 1,308w HTML · MD

📄 When you can't upgrade: open source examples of Endor Patches | Endor Labs 1,143w HTML · MD

📄 Application Security Posture Management (ASPM) Explained | Endor Labs 2,080w HTML · MD

📄 Mastering Security Automation: Exception and Remediation Policies | Endor Labs 756w HTML · MD

📄 sca 318w HTML · MD

📄 compliance 251w HTML · MD

📄 Cyber insurers are pricing based on patching speed | Endor Labs 992w HTML · MD

📄 AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor Labs 984w HTML · MD

📄 Fixed is Better than Found | Upgrades & Remediation | Endor Labs 535w HTML · MD

📄 PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) | Endor Labs 835w HTML · MD

📄 People AI Transforms Security And Compliance With Endor Labs… | Endor Labs 1,169w HTML · MD

📄 Everything You Need To Know About The FedRAMP RFC-0012 | Endor Labs 724w HTML · MD

📄 Open Source Licensing Simplified: A Comparative Overview of Popular Licenses | Endor Labs 1,206w HTML · MD

📄 Proactive Protection from Malware Attacks | Endor Labs 469w HTML · MD

📄 Malware Defense: A multi-agent detection engine and package firewall | Endor Labs 288w HTML · MD

📄 Your model, our analysis: BYOK for Endor Labs AI SAST | Endor Labs 1,516w HTML · MD

📄 Why Endor Labs AI SAST for C finds what other tools miss | Endor Labs 1,109w HTML · MD

📄 malware-in-open-source-ecosystems 503w HTML · MD

📄 state-of-dependency-management-2025 625w HTML · MD

📄 CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass | Endor Labs 758w HTML · MD

📄 secret-detection 241w HTML · MD

📄 Cursor Security: How to Secure AI-Generated Code in 2026 | Endor Labs 2,096w HTML · MD

📄 How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability | Endor Labs 1,593w HTML · MD

📄 Fireside Chat: CISOs on AI, Shift Left, and Building Trust at People.ai and AppLovin | Endor Labs 640w HTML · MD

📄 How To Evaluate Secret Detection Tools | Endor Labs 1,508w HTML · MD

📄 Endor Labs + Zscaler: Zero Trust Application Security for the AI Era | Endor Labs 1,260w HTML · MD

📄 Container Layer Analysis: Clarity in Remediation | Endor Labs 1,068w HTML · MD

📄 Combining EPSS and Reachability Analysis to Optimize Vulnerability Management | Endor Labs 1,407w HTML · MD

📄 What You Need to Know About Apache Struts and CVE-2023-50164 | Endor Labs 660w HTML · MD

📄 Introducing the Endor Labs MCP Server: fix-first security for the vibe coding era | Endor Labs 682w HTML · MD

📄 Under the Hood: People.ai's Proactive Approach to AI Security | Endor Labs 1,212w HTML · MD

📄 Structuring Prompts for Secure Code Generation | Endor Labs 726w HTML · MD

📄 Beyond Mythos: A CISO's Guide to Building an Effective Software Security Program for the AI Era | Endor Labs 268w HTML · MD

📄 Endor Labs & Oligo: Closing the Loop Between Secure Code and Secure Runtime | Endor Labs 632w HTML · MD

📄 Endor Labs Now Available on Google Cloud Marketplace | Endor Labs 480w HTML · MD

📄 Beyond MCP: The New Security Playbook for Coding Agents | Endor Labs 3,063w HTML · MD

📄 Zebra Technologies Cuts SCA Noise by 97% with Endor Labs | Endor Labs 655w HTML · MD

📄 npm-axios-compromise 823w HTML · MD

📄 Critical Security Controls for Governing AI Coding Agents | Endor Labs 1,478w HTML · MD

📄 OSS Vulnerabilities And The Digital Operational Resilience… | Endor Labs 2,006w HTML · MD

📄 Container Scanning + SCA = Better Together | Endor Labs 2,254w HTML · MD

📄 Build vs. Buy Code Security: Same Model, Same Tasks, 12x the Token Bill | Endor Labs 1,442w HTML · MD

📄 The Great Indonesian TEA Theft: Analyzing a NPM Spam Campaign | Endor Labs 1,912w HTML · MD

📄 Introducing A Better Way To SCA For Monorepos And Bazel |… | Endor Labs 1,114w HTML · MD

📄 5 Tips for Managing Bazel Dependencies (Without Losing Friends) | Endor Labs 1,737w HTML · MD

📄 Your Git Repo Is a Software Supply Chain Risk | Endor Labs 1,274w HTML · MD

📄 Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise | Endor Labs 1,819w HTML · MD

📄 GitHub Action tj-actions/changed-files supply chain attack: what you need to know | Endor Labs 777w HTML · MD

📄 Streamline Investigation with Enriched Vulnerability Search | Endor Labs 548w HTML · MD

📄 VMware Achieves SBOM Compliance for Over 100 Services with Endor Labs | Endor Labs 810w HTML · MD

📄 Rubrik Hits Aggressive SLAs via Endor Labs | Endor Labs 1,262w HTML · MD

📄 Reduce FedRAMP Compliance Costs | Endor Labs 525w HTML · MD

📄 Achieving FedRAMP’s Container Scanning Requirements | Endor Labs 895w HTML · MD

📄 A Practitioner’s Guide to Responding to the TeamPCP Supply Chain Attacks | Endor Labs 255w HTML · MD

📄 Remote Code Execution Vulnerabilities in Apache Struts | Endor Labs 1,163w HTML · MD

📄 LiteLLM 1.107.0 Compromised: Python Startup Hooks Steal Cloud, AI, and Proxy Credentials | Endor Labs 1,877w HTML · MD

📄 Threat Center and Package Firewall for VS Code Extensions | Endor Labs 666w HTML · MD

📄 ci-cd 238w HTML · MD

📄 Improve Kubernetes Security with Signed Artifacts and Admission Controllers | Endor Labs 885w HTML · MD

📄 eMudhra CA Compromise: The Trust Stores You Didn't Patch | Endor Labs 2,636w HTML · MD

📄 OWASP Top 10 Risks for Open Source | Endor Labs 628w HTML · MD

📄 Context Engineering for Application Security | Endor Labs 3,331w HTML · MD

📄 open-source 228w HTML · MD

📄 Endor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library | Endor Labs 1,624w HTML · MD

📄 AI SAST: Code Security for the Agentic SDLC | Endor Labs 307w HTML · MD

📄 AI in AppSec: What to Build vs. Buy | Endor Labs 2,089w HTML · MD

Pages