Blog Archiv

Sicherheit für die Lieferkette

Laravel Lang Supply Chain Advisory

23. Mai 2026

Sicherheit für die Lieferkette

Malicious node-ipc versions published to npm in suspected maintainer account compromise

15. Mai 2026

Sicherheit für die Lieferkette

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

11. Mai 2026

Sicherheit für die Lieferkette

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

30. April 2026

Anwendungssicherheit

Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)

29. April 2026

Sicherheit für die Lieferkette

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

29. April 2026

Anwendungssicherheit

Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

27. April 2026

KI

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

23. April 2026

KI

Governing Security in the Age of Infinite Signal – From Discovery to Control

10. April 2026

KI

Secure What Matters: Scaling Effortless Container Security for the AI Era

7. April 2026

KI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

2. April 2026

KI

Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program

1. April 2026

KI

The 5 Principles of Snyk’s Developer Experience

26. März 2026

KI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

24. März 2026

KI

I Read Cursor's Security Agent Prompts, So You Don't Have To

17. März 2026

KI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

17. März 2026

KI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

19. Februar 2026

KI

Snyk and Cline: Securing the Future of Autonomous Coding

18. Februar 2026

KI

Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric

17. Februar 2026

KI

The Future of AI Agent Security Is Guardrails

12. Februar 2026

KI

Exploitability Isn’t the Answer. Breakability Is.

12. Februar 2026

KI

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

11. Februar 2026

KI

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII

5. Februar 2026

KI

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

5. Februar 2026