Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CVE-2025-31324: Critical SAP Flaw Exposes Systems to Remote Attacks

Active exploit targets SAP NetWeaver via unauthenticated remote code execution. This flaw allows unauthenticated attackers to upload and execute arbitrary files, leading to complete system compromise. In this video, we break down how the vulnerability works, why it’s dangerous, and what steps you must take to secure your systems.

The Howler Episode 18: Lisa Tetrault, Senior Vice President, Security Services

This month, we sit down with Lisa Tetrault, Senior Vice President of Security Services, as she shares about her career journey, scaling the Security Operations Center (SOC) at Arctic Wolf from when we had less than 100 pack members to today, and the practices that keep her grounded and achieving her goals.

The Different Types of Authorization Models

Authorization models control who gets access to what. Learn about Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Relationship-Based Access Control (ReBAC), Mandatory Access Control (MAC) and Discretionary Access Control (DAC). Discover which model fits your organization’s needs.

Bug Bounty Secrets: Scope, Rules, & Hacker Invites REVEALED!

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Old Data: Are You Keeping Too Much? Incident Response Risks! #appsec #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.