Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

mend

EU CRA explained: requirements, timeline, and compliance

Jul 30, 2026 By Tiffany Jennings In Mend
The EU Cyber Resilience Act (CRA) is a sweeping regulation that mandates security by design and uniform cybersecurity standards for all hardware and software products with digital elements sold in the European Union. The CRA officially entered into force in December 2024, with compliance enforcement phased in over the coming years.
Read Post
mend

Move faster than AI-driven risk: Inside Mend.io's latest AI application security update

Jul 28, 2026 By Asaf Saar In Mend
AI didn’t just change how fast you ship. It changed what your AI application security program has to protect. Two years ago, security teams protected code, open source, and containers. Today they also have to protect AI agents, MCP servers, models, prompts, and runtime interactions, configured or deployed faster than any team can manually review. The attack surface didn’t grow. It exploded.
Read Post
mend

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Jul 22, 2026 By Maciej Mensfeld In Mend
Mend.io’s research team caught this campaign before most of the open source community ever saw it. Continuous monitoring of RubyGems flagged a batch of gems that looked, at a glance, like an ordinary cryptomining squat, and Mend.io reported the full batch to RubyGems for takedown. Every gem was pulled within hours. Mend.io’s team also pulled two of the samples apart in full, because knowing a campaign exists isn’t the same as knowing how it works.
Read Post
mend

Best 6 AI security posture management platforms (AI-SPM) in 2026

Jul 21, 2026 By Tiffany Jennings In Mend
AI Security Posture Management (AI-SPM) platforms are specialized tools that discover, monitor, and secure AI models, pipelines, and data, mitigating risks like data leakage and model poisoning. They offer continuous visibility, manage misconfigurations, and enforce security policies across cloud services like Azure OpenAI and Bedrock.
Read Post
mend

Independence is the moat

Jul 14, 2026 By Asaf Saar In Mend
Why the independent layer keeps winning as the models get better, not despite them. This series has been building to one question, and it is the objection every honest reader has been holding since the first piece. If the frontier models keep getting better this fast, why does an independent security layer keep winning? Why not wait for the model that writes safe code and verifies its own work?
Read Post
mend

Dependency management tools: Key features and 6 tools to know in 2026

Jul 9, 2026 By Tiffany Jennings In Mend
Dependency management tools are software solutions designed to automate and streamline the process of handling external libraries, modules, or packages that a project relies on. These tools help developers specify, install, update, and track dependencies, ensuring that all required components are present and compatible.
Read Post

Why Project Glasswing Changes the Rules of AppSec

Jul 8, 2026 By Mend In Mend
The old application security playbook is broken. With Anthropic’s Claude Mythos and the release of Project Glasswing, AI agents can now autonomously chain low-severity bugs into working zero-day exploits, collapsing the time between vulnerability discovery and active exploitation. In this video, Mend.io's Saoirse Hinksmon (Head of Product Marketing) and Daniel Wyrzykowski (Product Manager) break down the structural shifts in the threat landscape and what security teams must do to keep pace.
View Video
mend

The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.

Jul 8, 2026 By Tiffany Jennings In Mend
On July 7, 2026, the European Central Bank sent a letter to the CEO of every bank it directly supervises with an unambiguous instruction: build a formal action plan against AI-enabled cyberattacks, and submit it to your supervisory team by October 31.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.