Mend.io Blog

Learn how to manage dependencies in cloud-native applications efficiently. Explore best practices & tools to ensure & up-to-date software

Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Learn how to easily update Node.js to the latest version on macOS, Linux, & Windows.

Learn how to efficiently update Docker images and containers to the latest version for improved security and performance.

Discover the truth about Application Testing with SAST. Learn about common myths, integration, and reducing false positives for security.

Learn why automating dependency updates is crucial for software security and efficiency. Discovertools like to streamline the process.

A comprehensive guide to cloud-native applications, technology, and security. Learn about containers, microservices, CI/CD, and more.

Celebrate Pride 2022 with Mend as we support LGBTQ+ in tech. Hear from employees on their experiences and advice for the tech workplace.

Discover six key steps to achieve zero trust in application security. Learn how to protect your organization from cyberattacks.

Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.

Learn about the 3 critical best practices of software supply chain security to protect your organization from malicious packages.

Learn about the latest GitHub features to enhance your code security and dependency management. Stay ahead of vulnerabilities.

Learn about Cloud Security Architecture. Understand the importance, core principles, and threats to secure your cloud environment effectively.

Discover how Mend Supply Chain Defender integrates with JFrog Artifactory to block malicious software threats in your code base.

From WhiteSource to Mend—A Rebrand Journey. Follow our evolution from open source to all code application security.