corpus.blog
56,966 blogs · [ { "id": "01a0d2a5-b3f8-73ed-88e2-bd6190ca6907", "title": "Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface", "url": "https://snyk.io/blog/vulnerability-backlog-attack-surface/", "published_at": "2026-09-24T04:00:00+00:00" }, { "id": "01a0d0f6-9883-7288-aa28-97eba3edcb5e", "title": "So I asked my agent instead…", "url": "https://snyk.io/blog/so-i-asked-my-agent-instead/", "published_at": "2026-09-22T04:00:00+00:00" }, { "id": "01a0d0f6-9883-7288-aa28-97eba48d19f6", "title": "The AI Hurricane Is Here", "url": "https://snyk.io/blog/ai-hurricane-is-here/", "published_at": "2026-09-15T04:00:00+00:00" }, { "id": "01a08cea-1e9d-730c-90dc-f220e6cd0f37", "title": "Is prevention essentially a solved problem?", "url": "https://snyk.io/blog/is-prevention-solved/", "published_at": "2026-09-10T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1b3c5a9a", "title": "Why Your AI Application Is Exposed", "url": "https://snyk.io/blog/why-your-ai-application-is-exposed/", "published_at": "2026-08-26T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1b68e55e", "title": "Remediation Agents, Demystified: Why Fixing Beats Finding", "url": "https://snyk.io/blog/remediation-agents-demystified/", "published_at": "2026-08-19T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1bda4d4d", "title": "Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%", "url": "https://snyk.io/blog/snyk-agent-fix-remediation-benchmark/", "published_at": "2026-08-18T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1be4a928", "title": "The Agent Baseline: 35 Controls, But Where Should You Start?", "url": "https://snyk.io/blog/agent-baseline-35-controls-where-should-you-start/", "published_at": "2026-08-12T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1cb977fd", "title": "Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS", "url": "https://snyk.io/blog/what-evo-cos-found-real-enterprise-saas/", "published_at": "2026-08-10T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1d698a95", "title": "Continuous Offensive Security & AI Pentesting: 20 FAQs", "url": "https://snyk.io/blog/continuous-offensive-security-ai-pentesting-20-faqs/", "published_at": "2026-08-05T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1e0b0d73", "title": "Stop The Sprawl Snyk Secrets Now Generally Available", "url": "https://snyk.io/blog/snyk-secrets/", "published_at": "2026-08-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1ec79b74", "title": "A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense", "url": "https://snyk.io/blog/remediation-agent-malicious-code-defense/", "published_at": "2026-08-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1ef8eb1b", "title": "Evo Continuous Offensive Security Is Here Pentesting Grade Coverage For The 350 Days A Year You Aren't Testing", "url": "https://snyk.io/blog/evo-continuous-offensive-security/", "published_at": "2026-08-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e1fd2132f", "title": "Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks", "url": "https://snyk.io/blog/inside-keyv-npm-compromise-preinstall-malware-trusted-provenance-ide-hooks/", "published_at": "2026-08-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e20365ae6", "title": "AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy", "url": "https://snyk.io/blog/why-we-rebuilt-evo-ai-model-risk-scoring/", "published_at": "2026-08-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e20b38d4c", "title": "Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code", "url": "https://snyk.io/blog/announcing-snyk-studio-integration-snowflake-cortex-code/", "published_at": "2026-07-30T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e21a80148", "title": "The Attacker Never Sleeps, Neither Can Your Testing", "url": "https://snyk.io/blog/attacker-never-sleeps-neither-can-testing/", "published_at": "2026-07-30T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2225958d", "title": "Stadium Summer: The Snyk Connect Fan Zone Tour", "url": "https://snyk.io/blog/stadium-summer-snyk-connect-fan-zone-tour/", "published_at": "2026-07-29T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e231f2d3b", "title": "The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security", "url": "https://snyk.io/blog/openai-hugging-face-incident/", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2360723f", "title": "What Is AI Pentesting and How Does It Work?", "url": "https://snyk.io/blog/what-is-ai-pentesting/", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2392ce59", "title": "Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)", "url": "https://snyk.io/blog/symlinks-are-still-scary/", "published_at": "2026-07-09T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e23d96251", "title": "Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?", "url": "https://snyk.io/blog/snyk-vulnbench-js-1-0-llm-security-review-repeatability/", "published_at": "2026-06-29T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e24250937", "title": "NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence", "url": "https://snyk.io/blog/nvd-multi-source-vulnerability-intelligence/", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e251f357a", "title": "A Note to Our Customers and Partners", "url": "https://snyk.io/blog/a-note-to-our-customers-and-partners/", "published_at": "2026-06-24T13:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e25cf9840", "title": "What nearly 10,000 developer environments reveal about agentic development risk", "url": "https://snyk.io/blog/agentic-development-security-ai-coding-risk/", "published_at": "2026-06-23T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e26bc3d29", "title": "Announcing Agentic Development Security (ADS)", "url": "https://snyk.io/blog/agentic-development-security-ads/", "published_at": "2026-06-23T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e270dbae0", "title": "The New Security Control Point: Governing AI Agents Inside the Execution Loop", "url": "https://snyk.io/blog/governing-ai-agents-inside-execution-loop/", "published_at": "2026-06-23T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e27b325df", "title": "When a vendor's breach becomes yours: lessons from the Klue incident", "url": "https://snyk.io/blog/when-a-vendors-breach-becomes-yours-lessons-from-the-klue-incident/", "published_at": "2026-06-23T03:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e28a52595", "title": "The full Snyk AI Security Platform, free for open source maintainers", "url": "https://snyk.io/blog/secure-developer-program/", "published_at": "2026-06-18T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e28e47326", "title": "A Day in the Life of an AI Engineer in Snyk's Lisbon Office", "url": "https://snyk.io/blog/a-day-in-the-life-of-an-ai-engineer-in-snyks-lisbon-office/", "published_at": "2026-06-16T23:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e290f34ea", "title": "A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope", "url": "https://snyk.io/blog/a-forgotten-contributor-account-compromised-the-entire-mastra-npm-package-scope/", "published_at": "2026-06-16T21:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e299a0654", "title": "The Government Just Banned an AI Model. An Engineer's Perspective.", "url": "https://snyk.io/blog/government-ban-ai-model-engineer-perspective/", "published_at": "2026-06-15T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e29bd570d", "title": "When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams", "url": "https://snyk.io/blog/fable-mythos-suspension-security-takeaways/", "published_at": "2026-06-14T13:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2a5c378f", "title": "Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp", "url": "https://snyk.io/blog/node-gyp-supply-chain-compromise-self-propagating-npm-worm-binding-gyp/", "published_at": "2026-06-04T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2ab4221b", "title": "So You Have an AI Security Budget. Now what?", "url": "https://snyk.io/blog/ai-security-budget/", "published_at": "2026-06-04T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2b6f4ff5", "title": "Type Level Security: The future of secure AI code generation?", "url": "https://snyk.io/blog/type-level-security/", "published_at": "2026-06-04T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2c60ccc5", "title": "The New Security Risks of the Agentic Development Lifecycle", "url": "https://snyk.io/blog/agentic-development-lifecycle/", "published_at": "2026-06-03T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2ca3f03a", "title": "Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection", "url": "https://snyk.io/blog/protestware-open-source-maintainer-qwik-1-10-0-prompt-injection/", "published_at": "2026-06-02T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2cff6f9f", "title": "Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages", "url": "https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/", "published_at": "2026-06-01T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2d4f0097", "title": "How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development", "url": "https://snyk.io/blog/relay-network-ai-coding-securely-coagentic-development/", "published_at": "2026-05-29T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2e1c3d1a", "title": "Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI", "url": "https://snyk.io/blog/snyk-remediation-agent-in-the-cli/", "published_at": "2026-05-29T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2e7998b4", "title": "Continuous Offensive Security: The Line We've Been Walking", "url": "https://snyk.io/blog/continuous-offensive-security/", "published_at": "2026-05-27T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2e79abb5", "title": "Laravel Lang Supply Chain Advisory", "url": "https://snyk.io/blog/laravel-lang-supply-chain-advisory/", "published_at": "2026-05-23T16:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2ec153f5", "title": "Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop", "url": "https://snyk.io/blog/claude-enterprise-integration-desktop-expansion/", "published_at": "2026-05-21T17:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2eeed0d5", "title": "Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future", "url": "https://snyk.io/blog/securing-ai-revolution-snyk-partners/", "published_at": "2026-05-21T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2f5d5690", "title": "A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office", "url": "https://snyk.io/blog/strategy-co-op-snyk-boston-office/", "published_at": "2026-05-20T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e2ffe8959", "title": "The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised", "url": "https://snyk.io/blog/durabletask-pypi-supply-chain-attack/", "published_at": "2026-05-19T23:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e30fe055c", "title": "Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account", "url": "https://snyk.io/blog/mini-shai-hulud-antv-npm-supply-chain-attack/", "published_at": "2026-05-18T23:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e312e2c1a", "title": "Malicious node-ipc versions published to npm in suspected maintainer account compromise", "url": "https://snyk.io/blog/malicious-node-ipc-versions-published-npm/", "published_at": "2026-05-15T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e322b7d52", "title": "TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack", "url": "https://snyk.io/blog/tanstack-npm-packages-compromised/", "published_at": "2026-05-11T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e32a80ad3", "title": "lightning PyPI Compromise: A Bun-Based Credential Stealer in Python", "url": "https://snyk.io/blog/lightning-pypi-compromise-bun-based-credential-stealer/", "published_at": "2026-04-30T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3340e114", "title": "Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira", "url": "https://snyk.io/blog/atlassian-integration-intelligent-remediation-jira/", "published_at": "2026-04-29T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e33d8b079", "title": "Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)", "url": "https://snyk.io/blog/thymeleaf-injection/", "published_at": "2026-04-29T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e343ea266", "title": "\"A Mini Shai-Hulud Has Appeared\": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages", "url": "https://snyk.io/blog/bun-based-stealer-hits-sap-cap-js-mbt-npm-packages/", "published_at": "2026-04-29T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e35237339", "title": "Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers", "url": "https://snyk.io/blog/malicious-release-of-elementary-data-pypi-package-steals-cloud-credentials-from-data-engineers/", "published_at": "2026-04-27T23:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e35ee957a", "title": "Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining", "url": "https://snyk.io/blog/qinglong-task-scheduler-rce-vulnerabilities/", "published_at": "2026-04-27T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e364b0cdf", "title": "Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure", "url": "https://snyk.io/blog/snyk-agent-fix-agentic-architecture/", "published_at": "2026-04-27T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3661d2e3", "title": "JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?", "url": "https://snyk.io/blog/snyk-covers-jpmorgan-cyber-list/", "published_at": "2026-04-23T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e36675c68", "title": "Hardcoding Security into Every Commit: The Future of Snyk Secrets", "url": "https://snyk.io/blog/future-snyk-secrets/", "published_at": "2026-04-23T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e371a0490", "title": "Governing Security in the Age of Infinite Signal – From Discovery to Control", "url": "https://snyk.io/blog/from-discovery-to-control/", "published_at": "2026-04-10T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e37ad986f", "title": "Secure What Matters: Scaling Effortless Container Security for the AI Era", "url": "https://snyk.io/blog/scale-container-security-effortlessly/", "published_at": "2026-04-07T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e38600786", "title": "You Patched LiteLLM, But Do You Know Your AI Blast Radius?", "url": "https://snyk.io/blog/litellm-ai-blast-radius/", "published_at": "2026-04-02T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e38b18284", "title": "Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program", "url": "https://snyk.io/blog/building-ai-security-with-our-customers/", "published_at": "2026-04-01T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e39839ff8", "title": "Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT", "url": "https://snyk.io/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/", "published_at": "2026-03-30T23:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3a5d0296", "title": "The 5 Principles of Snyk’s Developer Experience", "url": "https://snyk.io/blog/5-principles-of-snyk-developer-experience/", "published_at": "2026-03-26T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3b48e507", "title": "From Discovery to Defense: Why AI Red Teaming Is the Next Step After AI-SPM", "url": "https://snyk.io/blog/defense-ai-red-teaming/", "published_at": "2026-03-25T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3b4fcb9d", "title": "How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM", "url": "https://snyk.io/blog/poisoned-security-scanner-backdooring-litellm/", "published_at": "2026-03-24T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3c0d39be", "title": "Introducing Agent Security", "url": "https://snyk.io/blog/introducing-agent-security/", "published_at": "2026-03-23T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3cc05db1", "title": "The Next Era of AppSec: Why AI-Generated Code Needs Offensive Dynamic Testing", "url": "https://snyk.io/blog/the-next-era-of-appsec-why-ai-generated-code-needs-offensive-dynamic-testing/", "published_at": "2026-03-20T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3d3adc80", "title": "AI Is Building Your Attack Surface. Are You Testing It?", "url": "https://snyk.io/blog/ai-is-building-your-attack-surface-are-you-testing-it/", "published_at": "2026-03-19T00:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3d457628", "title": "Snyk Opens San Francisco Innovation Hub", "url": "https://snyk.io/blog/snyk-san-francisco-innovation-hub/", "published_at": "2026-03-18T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3e078f56", "title": "Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard", "url": "https://snyk.io/blog/snyk-tessl-partnership/", "published_at": "2026-03-17T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3e1c9bbe", "title": "I Read Cursor's Security Agent Prompts, So You Don't Have To", "url": "https://snyk.io/blog/cursor-security-agent-prompts/", "published_at": "2026-03-17T04:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3e888bea", "title": "The 89% Problem: How LLMs Are Resurrecting the \"Dormant Majority\" of Open Source", "url": "https://snyk.io/blog/llms-resurrecting-open-source-dormant-majority/", "published_at": "2026-03-04T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3f69d869", "title": "The Rise of the AI Security Engineer: A New Discipline for an AI-Native World", "url": "https://snyk.io/blog/the-ai-security-engineer/", "published_at": "2026-02-24T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3f791466", "title": "Snyk and uv, Better Together", "url": "https://snyk.io/blog/snyk-uv-partnership/", "published_at": "2026-02-24T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e3f7d6c4f", "title": "Claude Code Security: A Welcome Evolution in the Remediation Loop", "url": "https://snyk.io/blog/claude-code-remediation-loop-evolution/", "published_at": "2026-02-23T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e4025cf59", "title": "Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights", "url": "https://snyk.io/blog/fetch-the-flag-ctf-2026-official-challenge-write-ups/", "published_at": "2026-02-23T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e40b8ca35", "title": "How “Clinejection” Turned an AI Bot into a Supply Chain Attack", "url": "https://snyk.io/blog/cline-supply-chain-attack-prompt-injection-github-actions/", "published_at": "2026-02-19T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e41980de6", "title": "Snyk and Cline: Securing the Future of Autonomous Coding", "url": "https://snyk.io/blog/snyk-cline-partnership/", "published_at": "2026-02-18T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e424bbfeb", "title": "Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain", "url": "https://snyk.io/blog/snyk-vercel-securing-agent-skill-ecosystem/", "published_at": "2026-02-17T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e428e065e", "title": "Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric", "url": "https://snyk.io/blog/new-snyk-studio-capabilities-ai-security-fabric/", "published_at": "2026-02-17T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e43653e11", "title": "From Acceleration to Exposure: Why AI Demands Mature AppSec", "url": "https://snyk.io/blog/why-ai-demands-mature-appsec/", "published_at": "2026-02-12T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e4376da68", "title": "Exploitability Isn’t the Answer. Breakability Is.", "url": "https://snyk.io/blog/exploitability-isn-t-the-answer-breakability-is/", "published_at": "2026-02-12T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e4377ce1b", "title": "The Future of AI Agent Security Is Guardrails", "url": "https://snyk.io/blog/future-of-ai-agent-security-guardrails/", "published_at": "2026-02-12T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e43ce46ee", "title": "Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)", "url": "https://snyk.io/blog/skill-scanner-false-security/", "published_at": "2026-02-11T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e448002cd", "title": "How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware", "url": "https://snyk.io/blog/clawhub-malicious-google-skill-openclaw-malware/", "published_at": "2026-02-10T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e452a7596", "title": "280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII", "url": "https://snyk.io/blog/openclaw-skills-credential-leaks-research/", "published_at": "2026-02-05T18:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e458f5e73", "title": "Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise", "url": "https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/", "published_at": "2026-02-05T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e45a867da", "title": "Introducing the AI Security Fabric: Empowering Software Builders in the Era of AI", "url": "https://snyk.io/blog/ai-security-fabric/", "published_at": "2026-02-03T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e45d839f9", "title": "The Prescriptive Path to Operationalizing AI Security", "url": "https://snyk.io/blog/prescriptive-path/", "published_at": "2026-02-03T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e45e4980c", "title": "Snyk Advisor is Reshaping Package Intelligence on Snyk Security Database", "url": "https://snyk.io/blog/snyk-advisor-security-database/", "published_at": "2026-02-02T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e464d2455", "title": "4 Reasons Why CTFs Are One of the Best Ways to Grow in Cybersecurity", "url": "https://snyk.io/blog/ctfs-grow-cybersecurity/", "published_at": "2026-01-27T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e46ad9bac", "title": "Live From Davos: The End of Human-Speed Security", "url": "https://snyk.io/blog/live-from-davos/", "published_at": "2026-01-20T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e473db112", "title": "ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations", "url": "https://snyk.io/blog/servicenow-virtual-agent-vulnerability/", "published_at": "2026-01-14T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e476b65e1", "title": "Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)", "url": "https://snyk.io/blog/shai-hulud-post-mortem/", "published_at": "2026-01-08T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e47fc5876", "title": "Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development", "url": "https://snyk.io/blog/snyk-augment-code-partnership/", "published_at": "2026-01-07T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e4892268b", "title": "The Holiday Whisper: Shai-Hulud 3.0", "url": "https://snyk.io/blog/shai-hulud-3-0/", "published_at": "2025-12-29T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e494fb468", "title": "Evo Adds CycloneDX Support to Give Full AI Visibility", "url": "https://snyk.io/blog/evo-adds-cyclonedx/", "published_at": "2025-12-19T05:00:00+00:00" }, { "id": "01a07df5-49ee-7218-91aa-008e497e5c01", "title": "Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work", "url": "https://snyk.io/blog/old-ai-security-vs-evo/", "published_at": "2025-12-16T05:00:00+00:00" } ] posts Claim your blog
Back to Snyk
Blog · corpus.blog/blogs/snyk.io/posts

Snyk

snyk.io

2026

Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surfaceoriginal ↗
24 Sept 2026
So I asked my agent instead…original ↗
22 Sept 2026
The AI Hurricane Is Hereoriginal ↗
15 Sept 2026
Is prevention essentially a solved problem?original ↗
10 Sept 2026
Why Your AI Application Is Exposedoriginal ↗
26 Aug 2026
Remediation Agents, Demystified: Why Fixing Beats Findingoriginal ↗
19 Aug 2026
Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%original ↗
18 Aug 2026
The Agent Baseline: 35 Controls, But Where Should You Start?original ↗
12 Aug 2026
Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaSoriginal ↗
10 Aug 2026
Continuous Offensive Security & AI Pentesting: 20 FAQsoriginal ↗
5 Aug 2026
Stop The Sprawl Snyk Secrets Now Generally Availableoriginal ↗
4 Aug 2026
A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defenseoriginal ↗
4 Aug 2026
Evo Continuous Offensive Security Is Here Pentesting Grade Coverage For The 350 Days A Year You Aren't Testingoriginal ↗
4 Aug 2026
Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooksoriginal ↗
4 Aug 2026
AI Model Risk Intelligence Know Which Models You Can Trust Before You Deployoriginal ↗
4 Aug 2026
Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Codeoriginal ↗
30 Jul 2026
The Attacker Never Sleeps, Neither Can Your Testingoriginal ↗
30 Jul 2026
Stadium Summer: The Snyk Connect Fan Zone Touroriginal ↗
29 Jul 2026
The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Securityoriginal ↗
28 Jul 2026
What Is AI Pentesting and How Does It Work?original ↗
27 Jul 2026
Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)original ↗
9 Jul 2026
Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?original ↗
29 Jun 2026
NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligenceoriginal ↗
25 Jun 2026
A Note to Our Customers and Partnersoriginal ↗
24 Jun 2026
What nearly 10,000 developer environments reveal about agentic development riskoriginal ↗
23 Jun 2026
Announcing Agentic Development Security (ADS)original ↗
23 Jun 2026
The New Security Control Point: Governing AI Agents Inside the Execution Looporiginal ↗
23 Jun 2026
When a vendor's breach becomes yours: lessons from the Klue incidentoriginal ↗
23 Jun 2026
The full Snyk AI Security Platform, free for open source maintainersoriginal ↗
18 Jun 2026
A Day in the Life of an AI Engineer in Snyk's Lisbon Officeoriginal ↗
16 Jun 2026
A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scopeoriginal ↗
16 Jun 2026
The Government Just Banned an AI Model. An Engineer's Perspective.original ↗
15 Jun 2026
When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teamsoriginal ↗
14 Jun 2026
Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyporiginal ↗
4 Jun 2026
So You Have an AI Security Budget. Now what?original ↗
4 Jun 2026
Type Level Security: The future of secure AI code generation?original ↗
4 Jun 2026
The New Security Risks of the Agentic Development Lifecycleoriginal ↗
3 Jun 2026
Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injectionoriginal ↗
2 Jun 2026
Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packagesoriginal ↗
1 Jun 2026
How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Developmentoriginal ↗
29 May 2026
Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLIoriginal ↗
29 May 2026
Continuous Offensive Security: The Line We've Been Walkingoriginal ↗
27 May 2026
Laravel Lang Supply Chain Advisoryoriginal ↗
23 May 2026
Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktoporiginal ↗
21 May 2026
Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Futureoriginal ↗
21 May 2026
A Day in the Life of a Strategy Co-Op in Snyk’s Boston Officeoriginal ↗
20 May 2026
The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromisedoriginal ↗
19 May 2026
Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Accountoriginal ↗
18 May 2026
Malicious node-ipc versions published to npm in suspected maintainer account compromiseoriginal ↗
15 May 2026
TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attackoriginal ↗
11 May 2026
lightning PyPI Compromise: A Bun-Based Credential Stealer in Pythonoriginal ↗
30 Apr 2026
Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jiraoriginal ↗
29 Apr 2026
Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)original ↗
29 Apr 2026
"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packagesoriginal ↗
29 Apr 2026
Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineersoriginal ↗
27 Apr 2026
Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptominingoriginal ↗
27 Apr 2026
Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secureoriginal ↗
27 Apr 2026
JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?original ↗
23 Apr 2026
Hardcoding Security into Every Commit: The Future of Snyk Secretsoriginal ↗
23 Apr 2026
Governing Security in the Age of Infinite Signal – From Discovery to Controloriginal ↗
10 Apr 2026
Secure What Matters: Scaling Effortless Container Security for the AI Eraoriginal ↗
7 Apr 2026
You Patched LiteLLM, But Do You Know Your AI Blast Radius?original ↗
2 Apr 2026
Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Programoriginal ↗
1 Apr 2026
Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAToriginal ↗
30 Mar 2026
The 5 Principles of Snyk’s Developer Experienceoriginal ↗
26 Mar 2026
From Discovery to Defense: Why AI Red Teaming Is the Next Step After AI-SPMoriginal ↗
25 Mar 2026
How a Poisoned Security Scanner Became the Key to Backdooring LiteLLMoriginal ↗
24 Mar 2026
Introducing Agent Securityoriginal ↗
23 Mar 2026
The Next Era of AppSec: Why AI-Generated Code Needs Offensive Dynamic Testingoriginal ↗
20 Mar 2026
AI Is Building Your Attack Surface. Are You Testing It?original ↗
19 Mar 2026
Snyk Opens San Francisco Innovation Huboriginal ↗
18 Mar 2026
Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standardoriginal ↗
17 Mar 2026
I Read Cursor's Security Agent Prompts, So You Don't Have Tooriginal ↗
17 Mar 2026
The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Sourceoriginal ↗
4 Mar 2026
The Rise of the AI Security Engineer: A New Discipline for an AI-Native Worldoriginal ↗
24 Feb 2026
Snyk and uv, Better Togetheroriginal ↗
24 Feb 2026
Claude Code Security: A Welcome Evolution in the Remediation Looporiginal ↗
23 Feb 2026
Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlightsoriginal ↗
23 Feb 2026
How “Clinejection” Turned an AI Bot into a Supply Chain Attackoriginal ↗
19 Feb 2026
Snyk and Cline: Securing the Future of Autonomous Codingoriginal ↗
18 Feb 2026
Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chainoriginal ↗
17 Feb 2026
Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabricoriginal ↗
17 Feb 2026
From Acceleration to Exposure: Why AI Demands Mature AppSecoriginal ↗
12 Feb 2026
Exploitability Isn’t the Answer. Breakability Is.original ↗
12 Feb 2026
The Future of AI Agent Security Is Guardrailsoriginal ↗
12 Feb 2026
Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)original ↗
11 Feb 2026
How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malwareoriginal ↗
10 Feb 2026
280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PIIoriginal ↗
5 Feb 2026
Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromiseoriginal ↗
5 Feb 2026
Introducing the AI Security Fabric: Empowering Software Builders in the Era of AIoriginal ↗
3 Feb 2026
The Prescriptive Path to Operationalizing AI Securityoriginal ↗
3 Feb 2026
Snyk Advisor is Reshaping Package Intelligence on Snyk Security Databaseoriginal ↗
2 Feb 2026
4 Reasons Why CTFs Are One of the Best Ways to Grow in Cybersecurityoriginal ↗
27 Jan 2026
Live From Davos: The End of Human-Speed Securityoriginal ↗
20 Jan 2026
ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundationsoriginal ↗
14 Jan 2026
Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)original ↗
8 Jan 2026
Secure by Default: Why Snyk and Augment Code are the New Standard for AI Developmentoriginal ↗
7 Jan 2026

2025

The Holiday Whisper: Shai-Hulud 3.0original ↗
29 Dec 2025
Evo Adds CycloneDX Support to Give Full AI Visibilityoriginal ↗
19 Dec 2025
Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Workoriginal ↗
16 Dec 2025
Next