Blog Archiv

KI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

2. April 2026

KI

Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program

1. April 2026

KI

The 5 Principles of Snyk’s Developer Experience

26. März 2026

KI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

24. März 2026

KI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

17. März 2026

KI

I Read Cursor's Security Agent Prompts, So You Don't Have To

17. März 2026

KI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

19. Februar 2026

KI

Snyk and Cline: Securing the Future of Autonomous Coding

18. Februar 2026

KI

Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric

17. Februar 2026

KI

Exploitability Isn’t the Answer. Breakability Is.

12. Februar 2026

KI

The Future of AI Agent Security Is Guardrails

12. Februar 2026

KI

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

11. Februar 2026

KI

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII

5. Februar 2026

KI

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

5. Februar 2026

KI

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

14. Januar 2026

KI

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

8. Januar 2026

Anwendungssicherheit

The Holiday Whisper: Shai-Hulud 3.0

29. Dezember 2025

Schwachstellen-Insights

Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182)

3. Dezember 2025

Sicherheit für die Lieferkette

SHA1-Hulud, npm supply chain incident

24. November 2025

KI

Malicious MCP Server on npm postmark-mcp Harvests Emails

25. September 2025

KI

When “Private" Isn't: The Security Risk of GPT Chats Leaking to Search Engines

1. August 2025

Anwendungssicherheit

Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware

22. Juli 2025

Schwachstellen-Insights

Snyk’s Statement on the MITRE CVEs Program Funding Update

16. April 2025

Schwachstellen-Insights

CVE-2025-29927 Authorization Bypass in Next.js Middleware

23. März 2025