Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

mend

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

Feb 26, 2026 By Tiffany Jennings In Mend
AI risk management is the process of identifying, assessing, and mitigating risks associated with artificial intelligence systems to ensure they are developed and used responsibly. It involves using frameworks like the NIST AI Risk Management Framework to address technical, ethical, and social challenges, including data bias, privacy violations, and security vulnerabilities.
Read Post
mend

Why Claude Code Security Is a Big Moment for Application Security

Feb 23, 2026 By Stephanie Broyles In Mend
Anthropic’s launch of Claude Code Security is exciting. Not because it changes everything overnight — but because it confirms something important: AI-powered security inside the developer workflow is becoming the new normal. And that’s a win for the entire industry.
Read Post
mend

Best Software Composition Analysis Providers: Top 5 in 2026

Feb 19, 2026 By Tiffany Jennings In Mend
Major software composition analysis (SCA) providers include Mend, Black Duck (Synopsys), and Veracode. They offer solutions to find, manage, and fix vulnerabilities and license issues in open-source components, with options ranging from developer-focused tools to enterprise-grade platforms with SBOM generation and deep compliance features.
Read Post

The Attackers Lens The Hidden Path To Largescale LLM Exploits

Feb 17, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video
mend

Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations

Feb 17, 2026 By Jeff Martin In Mend
Today, Mend.io is proud to announce the launch of AI Agent Configuration Scanning, integrated directly into the Mend AI Scanner. By treating “Agents as Code,” we are bringing security visibility and CI-friendly enforcement to AI configurations before they reach production The rapid adoption of AI agents has transformed the modern developer workflow.
Read Post

How MCP Servers Can Propagate Prompt Injection #mcp #promptinjection #aisecurity

Feb 10, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video
mend

You can't rely on open source for security - not even when AI is involved

Feb 6, 2026 By Jeff Martin In Mend
Open source libraries, packages, and models power nearly every product team today. They accelerate development, democratize innovation, and let teams stand on the shoulders of giants. But there’s a dangerous assumption creeping into engineering orgs: that open source — or AI trained on open source — will keep your software safe. That assumption is wrong. Open source gives you speed and community, not guaranteed security.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.