AI Cybersecurity & Fact Check

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

CrowdStrike Named a Leader in 2025 IDC MarketScape for Exposure Management

CrowdStrike has been named a Leader in the 2025 IDC MarketScape: Worldwide Exposure Management 2025 Vendor Assessment. CrowdStrike has redefined exposure management to meet the realities of today’s threat landscape, where modern adversaries move fast, exploit stolen credentials, and use malware-free techniques to bypass defenses and blend into legitimate operations across endpoint, identity, cloud, and unmanaged infrastructure.

The Surprising Truth About GPT-5 in Cursor's Agent Mode

In this video, I test out GPT-5 by asking it to build a simple and secure Node.js notes app that lets users create, read, update, and delete notes. I run two experiments — one without a security MCP server and one with it — to see how well the new model handles both functionality and security.

What is Advanced Endpoint Protection

Endpoints play a vital role in any organization’s operations. However, endpoints are susceptible to a variety of cyber attacks, particularly malware and ransomware – threats that remain highly popular among threat actors. Additionally, many social engineering attacks seek to gain access to individual users’ endpoints.

Why Data Unification is a Major Challenge for Enterprises

Why Data Unification is a Major Challenge for Enterprises In this SourceForge video, Carlo Alpuerto of A10 Networks identifies a significant challenge in cybersecurity: the unification of data. He explains that while the goal is for systems to feed one another, many solutions are "Frankensteined together," making it difficult to achieve this integration.

Beyond PCI and HIPAA: How Feroot Powers Gramm-Leach-Bliley Act (GLBA) Compliance

If your company collects, stores, or shares consumer financial data, there’s a good chance the Gramm–Leach–Bliley Act (GLBA) applies to you. But here’s the catch: many businesses outside of traditional banks—like fintech apps, insurance providers, and mortgage tech platforms—don’t realize they fall under GLBA oversight.

Beyond PCI and HIPAA: How Feroot Powers Children's Online Privacy Protection Act (COPPA) Compliance

If your business runs a website, mobile app, or online service that may attract children under 13—or collects data where children could be part of the audience—you’re likely subject to the Children’s Online Privacy Protection Act (COPPA). Many organizations assume COPPA only applies to educational platforms or “kids-only” websites, but the law has much broader reach. The biggest challenge?

Who is a Chief Compliance Officer?

In this article The role of a chief compliance officer (CCO) has become indispensable for organizations operating in diverse industries. The CCO is responsible for ensuring that the organization adheres to internal policies as well as external legal and regulatory requirements. This role not only protects the company from potential risks and liabilities but also reinforces the organization’s reputation, ethics, and overall corporate governance.

The New CISO Podcast Ep.133 - Steve Lodin | Teachable Moments: How to Learn from Career Challenges

In this episode of The New CISO, host Steve Moore speaks with Steve Lodin, VP of Information Security at Sallie Mae, about the career challenges that shaped his leadership style and the lessons he’s learned across decades in cybersecurity.