Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Securing autonomous AI agents: regulatory risk and governance for modern AppSec

Autonomous AI agents writing and executing code at machine speed present an urgent compliance challenge for modern software organizations. As global regulations tighten, engineering leaders must establish clear governance layers over agentic workflows, external tool calls, and Model Context Protocol integrations to ensure full accountability. In this session, Mend.io experts Asaf Saar and Ben Goldberg unpack the intersection of AI compliance, software supply chain security, and enterprise risk management. Learn how to bridge the accountability gap without sacrificing development velocity.

Prompt Injection in RAG: The Payload Is Still in Your Index

Every action in your agent-incident runbook operates on the agent. The payload of a RAG prompt injection sits in the index. You can kill the pod, rotate the credential and revoke the session, and each of those stops this workload from doing that thing again. None of them touch the chunk that caused it.

Prompt Injection Through Tool Output Is Two Events (Your Screens Read One)

Tool output is untrusted because your own systems produce it. That is the part of the OWASP guidance that never makes it into a deployment. The label goes on web pages and email bodies, where an outsider obviously wrote the text. It never goes on the ticket store, the CRM, or the repo, because those are yours. The attacker does not care whose system it is. He cares which field takes free text: the ticket body, the opportunity note, the PR description.

Best Hypervisors in UAE for Enterprise Virtualization

Selecting a hypervisor in the UAE is no longer just a technical infrastructure decision. For many enterprises, it now affects licensing predictability, data management, operational resilience, security, and access to regional support. As organizations continue their digital transformation initiatives, infrastructure teams are also reassessing long-standing virtualization platforms. Changes in VMware licensing and ownership have encouraged many enterprises to explore VMware Alternatives and plan potential VMware Migration strategies.

ISO 42001 Evidence: What Auditors Ask For

ISO 42001 is the management system standard for artificial intelligence. It sits on the backbone of ISO 27001 but with a different focus: do you have a system for governing AI, and can you prove that system runs, with evidence? Core to the standard is an Artificial Intelligence Management System (AIMS), a structured set of policies, processes, and controls an organization uses to govern AI.

CloudCasa DR for HPE - HPE Kubernetes Service (HKS) - PART 1- Failover

This demo shows a CloudCasa DR failover for a file-server application running on HPE Kubernetes Service clusters. - HPE Kubernetes Service clusters (or HKS) is HPE’s managed Kubernetes offering, provisioned through the HPE Morpheus VM Essentials console. A primary HKS cluster runs the file-server app on a volume backed by an HPE Alletra MP B10000 array, replicated to a second Alletra array at a recovery site where a second HKS cluster stands ready.

Certificate monitoring for your intranet hosts

Certificate monitoring from the cloud only sees what the internet sees, like your public websites. But the vCenter console, the internal API, the switch management page, or that thing on db01.corp.internal are invisible to it. Those certificates expire just like public ones. They just don’t warn anybody first. This gap became very clear when we shipped Private PKI. Now CertKit can issue certificates for internal names and IP addresses, deploy them, and install the root into your trust stores.

Mend Renovate Enterprise: managing dependencies at agentic scale

Automated dependency updates are not new. For years, Mend Renovate has scanned repositories, flagged outdated or vulnerable packages, and opened pull requests. What has changed is the sheer velocity of the pipeline. AI coding agents now write a significant share of production code, introducing open source packages continuously across thousands of repositories.