Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How MCP Servers Can Propagate Prompt Injection #mcp #promptinjection #aisecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Metro4Shell RCE (CVE-2025-11953) Is Putting Apps at Risk

A critical vulnerability known as Metro4Shell (CVE-2025-11953) has been identified in the React Native Metro development server, enabling unauthenticated remote code execution when exposed beyond localhost. Active exploitation is already underway, with attackers targeting exposed development environments to gain system-level access. For more insights on website and API security fundamentals, subscribe to our newsletter.

Find user activity across endpoints with Claude Code #cybersecurity #ai #securityoperations

Watch Claude Code query LimaCharlie telemetry to locate user activity across all endpoints in an organization. The agent correlates events across process execution, login sessions, and network connections to identify the most recent user activity and establish behavioral patterns. Security analysts can investigate user presence without manually searching through telemetry streams.

The browser blind spot: Phishing evolution and shadow AI risk with Cody Pierce

Join us for this week's Defender Fridays as we explore browser security, phishing evolution, and the risks of shadow AI with Cody Pierce, CEO at Neon Cyber. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

PHISHING GOT 10X FASTER WITH AI #apisecurity #phishing #aisecurity #DevSecOps #applicationsecurity

PHISHING GOT 10X FASTER Phishing attacks sped up 10x thanks to AI what took weeks is now compressed to hours. Vulnerabilities are discovered continuously and scaled instantly Attacks became adaptive and contextual for 2025 cybersecurity In this short clip from our webinar, we break down why this is the new reality.

2FA For WordPress Membership: 2FA for Membership Sites

Imagine this: your WordPress membership site, thriving with exclusive content and a growing base of loyal members. But what if one breach could shatter trust, expose sensitive data, and compromise your revenue stream? That’s where WordPress Two-Factor Authentication (2FA) steps in as your ultimate defence. Let’s dive into how WordPress 2FA transforms your WordPress membership site into an impregnable fortress and why it’s a must-have for any modern membership platform.