Every campaign has a story behind it. Ours happens to be a bedtime story. Read it to your kids. Read it to a little one in your life. Read it by yourself with a cup of coffee when you just "need a ...
The popular Tensorlake SDK, a package with more than 12,000 weekly downloads and 1000 GitHub starts shipped a poisoned release (version 0.5.144 ) that was infected with the self-propagating Shai-Hulud ...
By default, Endor Labs AI SAST and AI Chat send model requests to our provider accounts. With BYOK, those model requests go ...
Your developers asked an AI assistant for code this morning, and it shipped by lunch. AI security is the practice of protecting AI systems, using AI to defend other systems, and securing the code AI ...
We're excited to announce a technology partnership between Endor Labs and Bright Security, bringing together reachability-backed static analysis and AI-validated dynamic testing & validated ...
What Is CI/CD Supply Chain Security? In March 2025, attackers altered one popular GitHub Action and exposed secrets in the repositories that trusted it. CI/CD supply chain security protects the build ...
As of mid-August 2026, the number of Cyber Resilience Act harmonized standards published in the Official Journal is zero. Not "a handful" — zero. The Article 27 presumption of conformity is therefore ...
SAST (Static Application Security Testing) is a white-box method that analyzes an application's source code, bytecode, or binaries for security flaws without running it. It reads code the way a ...
An AI agent just opened a pull request to patch a vulnerable library. Should you merge it? DevSecOps is the practice of building software that puts automated security checks into every stage of ...
So, what is code security? Code security is the practice of finding, fixing, and preventing security weaknesses in software before it reaches production. It covers your own code, open-source ...
Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the ...