Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to Secure AI in Your App: Mend AI for AppSec Teams

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Attacker Profiles with Behavioral Analysis

How to Fix the Challenges with Web App Firewalls A10 security experts Gary Wang and Jamison Utter explore how to uncover “Dynamic Profiles” of threat actors through advanced behavioral analysis. By leveraging regression models and historical attack patterns, they demonstrate how to detect and anticipate evolving attacker behaviors—an essential capability for staying ahead in today’s rapidly shifting threat landscape.

BlackSuit Ransomware: The Royal Evolution That's Targeting Everyone | Cyber Threats Exposed 1

Think you know ransomware? Think again. BlackSuit isn't just another encryption threat—it's an evolved monster that's putting both Windows AND Linux systems at serious risk. In this episode of our cybersecurity series, we break down.

Built for the agentic era: Meet the Vanta MCP Server

The way developers interact with tools is changing fast. Language models like Claude and ChatGPT, and IDEs like Cursor and Windsurf are much more than assistants and environments—they’re powerful interfaces for interacting with enterprise data. ‍ At Vanta, we envision a world where compliance workflows can shift left to meet GRC teams and developers where they already are. By launching the Vanta MCP Server, we’re making that vision real.

Shadow AI leak exposes data from 571 Canva Creators #ai #cybersecurity #dataleak #vendor #vendorrisk

571 Canva Creators had their personal data exposed by an unsecured Chroma database. The database, used by Russian AI startup My Jedai, contained 341 document collections. One of these collections included survey responses with emails, countries of residence, and detailed feedback on the Canva Creators program. This isn’t your typical breach. It’s the result of unsecured AI infrastructure.

Warning: Crooks Are Using Vishing Attacks to Compromise Salesforce Instances

A criminal threat actor tracked as “UNC6040” is using voice phishing (vishing) attacks to compromise organizations’ Salesforce instances, according to researchers at Google’s Threat Intelligence Group. After gaining access, the attackers exfiltrate the victim’s data and hold it for ransom.