Open Source & Cloud Native Application Security Blog

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

July 28, 2026

What Is AI Pentesting and How Does It Works?

July 27, 2026

Application Security

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

July 9, 2026

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

June 2, 2026

Supply Chain Security

Malicious node-ipc versions published to npm in suspected maintainer account compromise

May 15, 2026

Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights

February 23, 2026

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

February 10, 2026

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

January 14, 2026

Welcome to Snyk Labs: Charting the Course for AI-Native Security

May 28, 2025

Snyk Security Labs Testing Update: Cursor.com AI Code Editor

January 14, 2025

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

August 14, 2024

Vulnerability Insights

Snyk finds PyPi malware that steals Discord and Roblox credential and payment info

August 16, 2022

Blog Archive