Blog Archive

Continuous Offensive Security & AI Pentesting: 20 FAQs

Stop The Sprawl Snyk Secrets Now Generally Available

Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense

AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy

Evo Continuous Offensive Security Is Here Pentesting Grade Coverage For The 350 Days A Year You Aren't Testing

Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code

The Attacker Never Sleeps, Neither Can Your Testing

Stadium Summer: The Snyk Connect Fan Zone Tour

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

What Is AI Pentesting and How Does It Work?

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?

NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence

A Note to Our Customers and Partners

What nearly 10,000 developer environments reveal about agentic development risk

The New Security Control Point: Governing AI Agents Inside the Execution Loop

Announcing Agentic Development Security (ADS)

When a vendor's breach becomes yours: lessons from the Klue incident

The full Snyk AI Security Platform, free for open source maintainers

A Day in the Life of an AI Engineer in Snyk's Lisbon Office

A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope

The Government Just Banned an AI Model. An Engineer's Perspective.

When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams