Blog Archive

AI

When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams

June 14, 2026

Supply Chain Security

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

June 4, 2026

AI

So You Have an AI Security Budget. Now what?

June 4, 2026

AI

Type Level Security: The future of secure AI code generation?

June 4, 2026

AI

The New Security Risks of the Agentic Development Lifecycle

June 3, 2026

AI

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

June 2, 2026

Supply Chain Security

Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages

June 1, 2026

How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development

May 29, 2026

Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI

May 29, 2026

Continuous Offensive Security: The Line We've Been Walking

May 27, 2026

Supply Chain Security

Laravel Lang Supply Chain Advisory

May 23, 2026

Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop

May 21, 2026

AI

Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future

May 21, 2026

Snyk Team

A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office

May 20, 2026

The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

May 19, 2026

Supply Chain Security

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

May 18, 2026

Supply Chain Security

Malicious node-ipc versions published to npm in suspected maintainer account compromise

May 15, 2026

Supply Chain Security

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

May 11, 2026

Supply Chain Security

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

April 30, 2026

AI

Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira

April 29, 2026

Supply Chain Security

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

April 29, 2026

Application Security

Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)

April 29, 2026

Supply Chain Security

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

April 27, 2026

AI

Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure

April 27, 2026