Blog Archiv

Sicherheit für die Lieferkette

Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

4. August 2026

KI

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

28. Juli 2026

KI

What Is AI Pentesting and How Does It Work?

27. Juli 2026

Anwendungssicherheit

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

9. Juli 2026

KI

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

2. Juni 2026

Sicherheit für die Lieferkette

Malicious node-ipc versions published to npm in suspected maintainer account compromise

15. Mai 2026

KI

Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights

23. Februar 2026

KI

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

10. Februar 2026

KI

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

14. Januar 2026

KI

Welcome to Snyk Labs: Charting the Course for AI-Native Security

28. Mai 2025

KI

Snyk Security Labs Testing Update: Cursor.com AI Code Editor

14. Januar 2025

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

14. August 2024

Schwachstellen-Insights

Snyk identifiziert PyPi-Malware, die Daten und Zahlungsinformationen von Discord und Roblox Nutzern abgreift

16. August 2022