Blog Archive

Exploitability Isn’t the Answer. Breakability Is.

The Future of AI Agent Security Is Guardrails

From Acceleration to Exposure: Why AI Demands Mature AppSec

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

Introducing the AI Security Fabric: Empowering Software Builders in the Era of AI

The Prescriptive Path to Operationalizing AI Security

Snyk Advisor is Reshaping Package Intelligence on Snyk Security Database

4 Reasons Why CTFs Are One of the Best Ways to Grow in Cybersecurity

Live From Davos: The End of Human-Speed Security

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development

The Holiday Whisper: Shai-Hulud 3.0

From Code to Agents: Proactively Securing AI-Native Apps with Cursor and Snyk

Evo Adds CycloneDX Support to Give Full AI Visibility

Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work

How Snyk Helps Federal Agencies Prepare for the Genesis Mission Era of AI-Driven Science

Run AutoMCP To Supercharge Your AI Agent with Libraries MCP Servers

Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182)

Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner

When Speed Meets Security: Snyk Studio for Kiro