snyk-security-intel

6 stories

Stories

Topic: snyk-security-intel

The AI Hurricane Is Here
AI is accelerating software creation and cyberattacks alike. Leaders must secure agents and code at inception, enforce controls at runtime, and validate defenses independently.
AI Code Completion by DeepCode BlogSep 15, 20268 min read
Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
keyv 6.0.0 and ten related npm releases shipped install-time malware. See affected versions, hashes, detection steps, and safe remediation order.
AI Code Completion by DeepCode BlogAug 4, 202612 min read
AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy
AI model risk depends on how a model is deployed. Learn how Evo combines adversarial testing, attack impact, and deployment context to help teams compare models and enforce policy.
AI Code Completion by DeepCode BlogAug 4, 20269 min read
Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
A harmless-looking symlink in a Git repo can redirect a tool into reading or writing anywhere on your machine. That old trick is now showing up in AI coding assistants, with nasty results.
AI Code Completion by DeepCode BlogJul 9, 202613 min read
NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence
NIST’s shift to risk-based enrichment makes one thing clear: modern security teams need more than a single public source. In the AI era, trusted vulnerability intelligence depends on multiple signals, human validation, and clear context.
AI Code Completion by DeepCode BlogJun 25, 20269 min read
What nearly 10,000 developer environments reveal about agentic development risk
AI coding agents are adding a new layer to the software supply chain. Learn what Snyk found in nearly 10,000 developer environments and how to secure the tools, instructions, and permissions behind agentic development.
AI Code Completion by DeepCode BlogJun 23, 20269 min read