Tag archive
AI can find vulnerabilities at scale, but enterprise security now depends on control, validation, and governance that can keep up.
JPMorganChase published a 10-point cyber resilience checklist. See how Snyk covers 8 of the 10 actions and where it fits in your security stack.
Discover the 5 principles behind Snyk’s developer experience. Learn how seamless workflows, actionable fixes, and AI-driven security help developers ship secure code faster without disrupting productivity.
Announcing Snyk Container Registry Sync GA for automated image management and runtime intelligence. Scale container security effortlessly for the fast-paced AI era.
The Clinejection vulnerability chain illustrates a dangerous new era of supply chain attacks where AI agents are turned into exploit vectors. By combining indirect prompt injection with GitHub Actions cache poisoning, attackers successfully pushed unauthorized code to thousands of developers. This incident highlights the critical need for hardened CI/CD pipelines and rigorous security for AI-assisted coding tools.
Are "Skill Scanners" on ClawHub actually safe? We tested popular community tools like Skill Defender and SkillGuard against real malware. The results were alarming.
AppSec is often stalled by a lack of trust: will this fix break my app? Snyk’s new Breakability Risk feature solves this by identifying which security updates are safe to merge and which require caution. By focusing on low-risk fixes first, developers can clear backlogs four times faster and reduce security debt without increasing their workload.
Discover how 7.1% of AI agent skills are designed to leak secrets, PII, and API keys through LLM context. Learn to defend with Evo & mcp-scan.
The critical ServiceNow Virtual Agent vulnerability highlights a vital lesson: securing agentic AI requires a return to traditional AppSec foundations. While AI can amplify risks, the root causes often stem from classic failures in authentication and authorization.
Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud. We believe this is a second wave of the Shai-Hulud attack. Learn what this attack is and how Snyk is responding.
Urgent security alert: On September 25, 2025, the npm package 'postmark-mcp' was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning with Snyk's MCP-Scan.
Discover how a now-removed feature allowed private ChatGPT conversations to be indexed by search engines. Learn the privacy risks and how to protect your data from unintentional exposure.