Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Fixing 4,000 Vulnerabilities? Quick Ways to Eliminate Security Issues! #podcast #infosec

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

What We Found with OpenAI's Codex CLI Tool

In this video, I explore OpenAI’s Codex CLI tool to see how powerful it really is for coding with AI. But things quickly go off the rails… what started as a simple test ended with a surprise identity verification request. Apparently, to continue using the tool, I need to submit a government-issued ID and a photo of myself—something I didn’t expect at all. I talk through the process, show the error I ran into, and share my honest thoughts on this level of access and how invasive it feels for a developer tool.

Kubernetes Backup Made Simple: Meet CloudCasa for Cloud-Native Protection

Kubernetes and cloud-native platforms are transforming how we build and run applications—but traditional backup tools just can’t keep up. They’re complex, slow, and expensive. Enter CloudCasa: The backup and recovery solution built specifically for Kubernetes and cloud-native environments. Key Benefits: Kubernetes backup doesn’t have to be complicated. CloudCasa makes it simple, secure, and cost-effective—whether you're protecting clusters, pods, or VMs. What’s your biggest challenge with Kubernetes backup and recovery? Drop your thoughts below—we’d love to hear from you!

Deploying Gen AI Guardrails for Compliance, Security and Trust

AI guardrails are structured safeguards, whether technical, security or ethical, which are designed to guide AI systems so they operate safely, responsibly, and within intended boundaries. Much like highway guardrails that prevent vehicles from veering off course, these measures ensure AI remains aligned with organizational policies, regulations, and ethical values.

SCA Tool: Why Developers Love It & Boost ROI Instantly!

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Air-Gapped Kubernetes Backup for Regulated Industries: Securing Compliance and Resilience

Kubernetes regulated industries—such as finance, government, and healthcare—operate under strict data protection and compliance mandates. While Kubernetes enables agility and scalability, its dynamic and ephemeral nature makes safeguarding data more complex.

From Reactive to Proactive AppSec: Your Security Team's Secret Weapon! #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

3 VNet Use Cases to Simplify Internal Access (Without VPNs)

VPNs have their time and place. But at Teleport, we don’t think accessing internal engineering resources is one of them. VPNs create friction, slow down development workflows, and often become security bottlenecks. That's where VNet comes in. Teleport VNet was designed to give engineers a secure way to access internal applications without VPNs or port forwarding.

Dev Platform Breaches: How GitHub, Jira & Confluence Exposed Mercedes, Apple, Disney & Others

Welcome to the DevOps multiverse. Here, code is currency, while platforms like GitHub, Jira, and Confluence power critical infrastructure. Here, even the smallest misstep can trigger a chain reaction measured in gigabytes of leaked data, thousands of compromised credentials, and millions of dollars in financial losses, not to mention reputational damage. These risks aren’t theoretical.