The Curious Engineer

All blogs / Security

Blog RSS Feed

snyk.io/blog

Level up your open source & cloud native application security knowledge. Stay up to date with news & happenings in cloud, container, serverless security & more!

SecurityDevOps / SRE / infrastructure

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
1,679 from 17 Apr 2015 to 28 Oct 2026
Posting
weekly (132 in the last year)
Kind
company blog
Feed
https://snyk.io/blog/feed/

Latest

October 2026

  1. PHP2Shell Won't Be the Last. Here's Where the Next One Will Show Up First.
  2. Snyk UNFILTERED: Inside Our First-Ever Customer Summit
  3. PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now
  4. Turn Your Vulnerability Backlog Into Pull Requests With Agentic Remediation
  5. AI Model Risk Depends on What the Model Can Reach
  6. AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered
  7. VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?
  8. Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development
  9. Frontier models found the vulnerabilities. Only the attacker found the chains.
  10. Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed.
  11. Why AI Coding Agents Keep Writing Broken Access Control

September 2026

  1. What Is Agentic AppSec?
  2. Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control
  3. Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface
  4. So I asked my agent instead…
  5. The AI Hurricane Is Here
  6. Is prevention essentially a solved problem?

August 2026

  1. Why Your AI Application Is Exposed (Even When Your Scans Come Back Clean)
  2. Remediation Agents, Demystified: Why Fixing Beats Finding
  3. Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%
  4. The Agent Baseline: 35 Controls, But Where Should You Start?
  5. Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS
  6. Continuous Offensive Security & AI Pentesting: 20 FAQs
  7. Stop The Sprawl Snyk Secrets Now Generally Available
  8. Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
  9. A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense
  10. AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy
  11. Evo Continuous Offensive Security Is Here Pentesting Grade Coverage For The 350 Days A Year You Aren't Testing

July 2026

  1. Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code
  2. The Attacker Never Sleeps, Neither Can Your Testing
  3. Stadium Summer: The Snyk Connect Fan Zone Tour
  4. The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security
  5. What Is AI Pentesting and How Does It Work?
  6. Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

June 2026

  1. Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
  2. NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence
  3. A Note to Our Customers and Partners
  4. What nearly 10,000 developer environments reveal about agentic development risk
  5. The New Security Control Point: Governing AI Agents Inside the Execution Loop
  6. Announcing Agentic Development Security (ADS)
  7. When a vendor's breach becomes yours: lessons from the Klue incident
  8. The full Snyk AI Security Platform, free for open source maintainers
  9. A Day in the Life of an AI Engineer in Snyk's Lisbon Office
  10. A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  11. The Government Just Banned an AI Model. An Engineer's Perspective.
  12. When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams
  13. Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  14. Type Level Security: The future of secure AI code generation?
  15. So You Have an AI Security Budget. Now what?
  16. The New Security Risks of the Agentic Development Lifecycle
  17. Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection
  18. Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages

May 2026

  1. How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development
  2. Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI
  3. Continuous Offensive Security: The Line We've Been Walking
  4. Laravel Lang Supply Chain Advisory
  5. Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future
  6. A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office
  7. The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised
  8. Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account
  9. Malicious node-ipc versions published to npm in suspected maintainer account compromise
  10. TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

April 2026

  1. lightning PyPI Compromise: A Bun-Based Credential Stealer in Python
  2. "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages
  3. Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira
  4. Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)
  5. Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers
  6. Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining
  7. Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure
  8. Hardcoding Security into Every Commit: The Future of Snyk Secrets
  9. JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?
  10. Governing Security in the Age of Infinite Signal – From Discovery to Control
  11. Secure What Matters: Scaling Effortless Container Security for the AI Era
  12. You Patched LiteLLM, But Do You Know Your AI Blast Radius?
  13. Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program

March 2026

  1. Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT
  2. The 5 Principles of Snyk’s Developer Experience
  3. From Discovery to Defense: Why AI Red Teaming Is the Next Step After AI-SPM
  4. How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM
  5. Introducing Agent Security
  6. The Next Era of AppSec: Why AI-Generated Code Needs Offensive Dynamic Testing
  7. AI Is Building Your Attack Surface. Are You Testing It?
  8. Snyk Opens San Francisco Innovation Hub
  9. Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard
  10. I Read Cursor's Security Agent Prompts, So You Don't Have To
  11. The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Source

February 2026

  1. The Rise of the AI Security Engineer: A New Discipline for an AI-Native World
  2. Snyk and uv, Better Together
  3. Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights
  4. Claude Code Security: A Welcome Evolution in the Remediation Loop
  5. How “Clinejection” Turned an AI Bot into a Supply Chain Attack
  6. Snyk and Cline: Securing the Future of Autonomous Coding
  7. Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric
  8. Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain
  9. Exploitability Isn’t the Answer. Breakability Is.
  10. The Future of AI Agent Security Is Guardrails
  11. From Acceleration to Exposure: Why AI Demands Mature AppSec
  12. Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)
  13. How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware
  14. 280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII
  15. Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise
  16. Introducing the AI Security Fabric: Empowering Software Builders in the Era of AI
  17. The Prescriptive Path to Operationalizing AI Security
  18. Snyk Advisor is Reshaping Package Intelligence on Snyk Security Database

January 2026

  1. 4 Reasons Why CTFs Are One of the Best Ways to Grow in Cybersecurity
  2. Live From Davos: The End of Human-Speed Security
  3. ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations
  4. Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)
  5. Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development

December 2025

  1. The Holiday Whisper: Shai-Hulud 3.0
  2. Evo Adds CycloneDX Support to Give Full AI Visibility
  3. Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work
  4. How Snyk Helps Federal Agencies Prepare for the Genesis Mission Era of AI-Driven Science
  5. Run AutoMCP To Supercharge Your AI Agent with Libraries MCP Servers
  6. Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182)
  7. Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner
  8. When Speed Meets Security: Snyk Studio for Kiro

November 2025

  1. Snyk Log Sniffer: AI-Powered Audit Log Insights for Security Leaders
  2. SHA1-Hulud, npm supply chain incident
  3. Scaling AI Security: How Evo Complements New Agentic Tools
  4. How Snyk Studio for Qodo Is Closing the AI Security Gap
  5. Why Threat Modeling Is Now Even More Critical for AI-Native Applications
  6. Anthem Awards 2025: Snyk Learn Recognized for Commitment to Secure AI Development
  7. Beyond Automation: Securing Low-Code Agentic AI with MCP Guardrails
  8. Snyk and Continue Partner to Embed AI-Powered Security into Every Step of the Developer Workflow
  9. Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam
  10. Organizations Achieve 288% ROI with The Snyk AI Trust Platform, According to New Forrester TEI Study
  11. Secure by Design: The Future of Threat Modeling for AI-Native Applications
  12. The Agentic OODA Loop: How AI and Humans Learn to Defend Together
  13. Snyk Studio brings security scanning and automated fixes to Factory's Droids
  14. Beyond the Scan: The Future of Snyk Container
  15. Snyk Studio: Now for All Customers, Powering Secure AI Development at Scale

October 2025

  1. DevSecCon 2025 Recap: Securing the AI Revolution Together
  2. Why We Built Evo — From My Heart
  3. Increasing Agility & Flexibility: How Mercato Solutions tackles the application security vs. flexibility conundrum with Snyk
  4. Snyk and Cognition partner to enhance security for AI-native development
  5. Beyond the Hype: 5 Major Reasons to Attend DevSecCon 2025
  6. Snyk Named a Leader in the 2025 Gartner® Magic Quadrant™ for Application Security Testing
  7. Phishing Campaign Leveraging the NPM Ecosystem

September 2025

  1. The Ultimate Guide to Upcoming CTFs: From Beginner to Elite Hacker in 6 Months (October 2025 - April 2026)
  2. Malicious MCP Server on npm postmark-mcp Harvests Emails
  3. How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements
  4. Snyk Ranked #51 on 2025 Forbes Cloud 100 List
  5. Secure Your AI Workflows: New Governance & Visibility Features from Snyk
  6. From Two Years to Two Weeks: How Labelbox Erased Its Security Debt with Snyk's AI-Accelerated Remediation
  7. Speaking Different Languages: How to Align Dev and Sec Teams Effectively
  8. Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack
  9. Snyk Named a Leader in the 2025 Forrester SAST Wave: SAST Solutions, Q3 2025
  10. npm Supply Chain Attack via Open Source maintainer compromise
  11. What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security

Every year

2026 1092025 1282024 1532023 2592022 3092021 2262020 2202019 1412018 562017 412016 322015 5