Mend Leadership Update: Building on Our Momentum for the Next Phase of Growth

OWASP’s 2026 LLM Top 10, and the shift most of the coverage will miss

The OWASP GenAI Security Project published the 2026 edition of its Top 10 for LLM Applications.

Another Black Hat USA is in the books, and what a week it was. From a main stage keynote at the AI Summit to candid podcast conversations, a video interview with Cyber Defense Magazine, and a booth game that just wouldn’t quit, Mend.io showed up in Las Vegas ready to talk about the...

The 30-day patch cycle is dead. Most security teams already know this. What they haven’t fully reckoned with is why it died, and what has to replace it. SC Media recently gathered a range of security leaders on exactly this shift, an...

On August 4, 2026, a malicious version of keyv was published to npm as [email protected], one of a number of npm packages affected across the Keyv and Cacheable ecosystem. The release follows the Mini Shai-Hulud pattern: a trojanized version of a heavily depended-on package, with an install-time hook that reaches cloud and CI credentials. It leaves the compiled library untouched and...

AI didn’t just change how fast you ship. It changed what your AI application security program has to protect.

Two years ago, security teams protected code, open source, and containers. Today they also have to protect AI agents, MCP servers, models, prompts, and runtime interactions, configured or deployed faster than any team can manually review. The attack surface didn...