SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Endor Labs Stories

American Stories

Endor Labs stories

GitHub Action compromise affects over 23,000 repositories
Supply Chain

GitHub Action compromise affects over 23,000 repositories

A malicious commit in the tj-actions/changed-files GitHub Action, used in over 23,000 repositories, threatens software security across numerous CI pipelines.

By Kaleah Salmon • 3 min read • Thu, 20th Mar 2025

Global Stories

Endor Labs stories

GitHub launches Copilot desktop app for agentic work
DevOps

GitHub launches Copilot desktop app for agentic work

Developers can now manage multiple AI coding agents in one place as GitHub tests a desktop Copilot app with worktree automation and review tools.

By Mark Tarre • 4 min read • This month
Malware surge in open source software alarms firms
Malware

Malware surge in open source software alarms firms

Organisations remain exposed as malware in open-source packages surged in 2025, with most advisories and account takeovers reported last year.

By Kaleah Salmon • 4 min read • Fri, 3rd Apr 2026
Endor Labs launches AURI to secure AI-driven coding
Digital Transformation

Endor Labs launches AURI to secure AI-driven coding

Endor Labs unveils AURI, a security intelligence platform embedding reachability-led checks into AI coding assistants and CI/CD pipelines.

By Sean Mitchell • 5 min read • Sat, 7th Mar 2026
Endor Labs unveils AURI to secure AI-driven coding
DevOps

Endor Labs unveils AURI to secure AI-driven coding

Endor Labs has launched AURI, an AI-aware security platform that embeds continuous code checks directly into agent-driven development workflows.

By Catherine Knowles • 5 min read • Fri, 6th Mar 2026
Endor Labs unveils AI SAST tool to cut false positives by 95%
DevOps

Endor Labs unveils AI SAST tool to cut false positives by 95%

Endor Labs launches AI-powered SAST tool that cuts false positives by 95%, improving code flaw detection and boosting developer efficiency.

By Catherine Knowles • 3 min read • Fri, 21st Nov 2025
Open-source AI Foundation launched to boost transparency
Supply Chain

Open-source AI Foundation launched to boost transparency

The Open-Source AI Foundation has launched to promote transparency in AI systems for government agencies, coinciding with DeepSeek's commitment to open source its AI models.

By Shannon Williams • 4 min read • Tue, 25th Feb 2025
GitHub partners with Endor Labs to boost security features
Cloud Security

GitHub partners with Endor Labs to boost security features

GitHub has partnered with Endor Labs, integrating advanced security software to help developers swiftly identify and manage critical vulnerabilities within the platform.

By Catherine Knowles • 2 min read • Fri, 14th Feb 2025
Opengrep launched by Endor Labs to boost open-source SAST
Unified Communications

Opengrep launched by Endor Labs to boost open-source SAST

Endor Labs has unveiled Opengrep, a new venture dedicated to maintaining the open-source integrity of static code analysis tools in application security.

By Kaleah Salmon • 3 min read • Fri, 31st Jan 2025
Endor Labs unveils AI open source model discovery tool
Application Security

Endor Labs unveils AI open source model discovery tool

Endor Labs has launched AI Model Discovery, a feature helping businesses identify and manage open source AI models, enhancing application security.

By Catherine Knowles • 3 min read • Fri, 31st Jan 2025
Open source software challenges predicted to continue in 2025
Endpoint Protection

Open source software challenges predicted to continue in 2025

Chris Hughes predicts that open source software adoption will grow in 2025, alongside sophisticated attacks and challenges in governance and security.

By Catherine Knowles • 3 min read • Sun, 5th Jan 2025
Microsoft integrates Endor Labs' solution into Defender
DevOps

Microsoft integrates Endor Labs' solution into Defender

Microsoft has integrated Endor Labs' Software Composition Analysis into Defender for Cloud, enabling unified security from code development to runtime.

By Imee Dequito • 2 min read • Thu, 21st Nov 2024
Endor Labs launches AI model scoring system for security
Physical Security

Endor Labs launches AI model scoring system for security

Endor Labs launches Endor Scores for AI Models, enabling developers to evaluate the security and quality of open source AI models on Hugging Face.

By Catherine Knowles • 3 min read • Fri, 25th Oct 2024
Endor Labs appoints cybersecurity veteran Karl Mattson as CISO
Supply Chain

Endor Labs appoints cybersecurity veteran Karl Mattson as CISO

Endor Labs has appointed Karl Mattson, a 25-year cybersecurity veteran, as its first Chief Information Security Officer to bolster software supply chain security.

By Imee Dequito • 2 min read • Wed, 25th Sep 2024
75% of security patches break software, analysis says
Software Development

75% of security patches break software, analysis says

Endor Labs' 2024 Dependency Management Report reveals that 75% of security patches risk breaking software, complicating open source vulnerability management.

By Shannon Williams • 3 min read • Thu, 19th Sep 2024
Endor Labs unveils tools to enhance OSS security efforts
Application Security

Endor Labs unveils tools to enhance OSS security efforts

Endor Labs unveiled Upgrade Impact Analysis and Endor Magic Patches at Black Hat, offering new tools to tackle OSS security risks and accelerate vulnerability remediation.

By Shannon Williams • 3 min read • Tue, 20th Aug 2024
Endor Labs warns of critical vulnerabilities in CocoaPods
Malware

Endor Labs warns of critical vulnerabilities in CocoaPods

Endor Labs reveals major security flaws in CocoaPods, threatening apps like Instagram and Uber. Critical CVEs could impact Swift and Objective-C supply chains.

By Shannon Williams • 3 min read • Wed, 10th Jul 2024

Stories from Other Regions

Endor Labs stories