Blog Archive

Supply Chain Security

Laravel Lang Supply Chain Advisory

May 23, 2026

Supply Chain Security

Malicious node-ipc versions published to npm in suspected maintainer account compromise

May 15, 2026

Supply Chain Security

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

May 11, 2026

Supply Chain Security

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

April 30, 2026

Application Security

Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)

April 29, 2026

Supply Chain Security

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

April 29, 2026

Application Security

Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

April 27, 2026

AI

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

April 23, 2026

AI

Governing Security in the Age of Infinite Signal – From Discovery to Control

April 10, 2026

AI

Secure What Matters: Scaling Effortless Container Security for the AI Era

April 7, 2026

AI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

April 2, 2026

AI

Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program

April 1, 2026

AI

The 5 Principles of Snyk’s Developer Experience

March 26, 2026

AI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

March 24, 2026

AI

I Read Cursor's Security Agent Prompts, So You Don't Have To

March 17, 2026

AI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

March 17, 2026

AI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

February 19, 2026

AI

Snyk and Cline: Securing the Future of Autonomous Coding

February 18, 2026

AI

Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric

February 17, 2026

AI

The Future of AI Agent Security Is Guardrails

February 12, 2026

AI

Exploitability Isn’t the Answer. Breakability Is.

February 12, 2026

AI

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

February 11, 2026

AI

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII

February 5, 2026

AI

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

February 5, 2026