Blog Archive

AI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

April 2, 2026

AI

Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program

April 1, 2026

AI

The 5 Principles of Snyk’s Developer Experience

March 26, 2026

AI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

March 24, 2026

AI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

March 17, 2026

AI

I Read Cursor's Security Agent Prompts, So You Don't Have To

March 17, 2026

AI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

February 19, 2026

AI

Snyk and Cline: Securing the Future of Autonomous Coding

February 18, 2026

AI

Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric

February 17, 2026

AI

Exploitability Isn’t the Answer. Breakability Is.

February 12, 2026

AI

The Future of AI Agent Security Is Guardrails

February 12, 2026

AI

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

February 11, 2026

AI

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII

February 5, 2026

AI

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

February 5, 2026

AI

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

January 14, 2026

AI

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

January 8, 2026

Application Security

The Holiday Whisper: Shai-Hulud 3.0

December 29, 2025

Vulnerability Insights

Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182)

December 3, 2025

Supply Chain Security

SHA1-Hulud, npm supply chain incident

November 24, 2025

AI

Malicious MCP Server on npm postmark-mcp Harvests Emails

September 25, 2025

AI

When “Private" Isn't: The Security Risk of GPT Chats Leaking to Search Engines

August 1, 2025

Application Security

Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware

July 22, 2025

Vulnerability Insights

Snyk’s Statement on the MITRE CVEs Program Funding Update

April 16, 2025

Vulnerability Insights

CVE-2025-29927 Authorization Bypass in Next.js Middleware

March 23, 2025