How to Work Around OpenAI ID Verification
How to Work Around OpenAI ID Verification Check out the full video.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Fend Off AI Fatigue with the Snyk AI Trust Platform
Generative AI has transformed software development almost overnight. From coding assistants to AI-native applications, tools are evolving faster than most teams can keep up with. But the rapid evolution of AI comes with its own cost: mental fatigue. Even among AI developers, most don’t consider themselves experts in generative AI. Between shifting tools, growing security risks, and a flood of hype, it’s no surprise that developers and security teams feel overwhelmed.
CRAZY Invasive Verification Method...
CRAZY Invasive Verification Method... Check out the full video.
What We Found with OpenAI's Codex CLI Tool
In this video, I explore OpenAI’s Codex CLI tool to see how powerful it really is for coding with AI. But things quickly go off the rails… what started as a simple test ended with a surprise identity verification request. Apparently, to continue using the tool, I need to submit a government-issued ID and a photo of myself—something I didn’t expect at all. I talk through the process, show the error I ran into, and share my honest thoughts on this level of access and how invasive it feels for a developer tool.
Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware
Starting on July 19th, 2025, an npm supply chain security incident has been attacking maintainers of popular open-source npm packages on the npm registry.
From Hype to Trust: Building the Foundations of Secure AI Development
Generative AI and Agentic AI are changing everything from who writes software to how we define secure architecture. At Snyk’s recent Lighthouse event in NYC, leaders from cloud, security, and development teams came together to answer one essential question: how do we move fast with AI without breaking trust? The answer? Start with visibility, bake in security by design, and never lose sight of the humans behind the code.
Navigating Enterprise AI Implementation: Risks, Rewards, and Where to Start
At Snyk, we believe that AI innovation starts with trust, which must be earned through clear governance, sound security practices, and proven value delivery. As we scale our AI initiatives across the business, we’re continually refining how to implement AI in a way that is not just fast and functional, but also secure and responsible.
Cursor IDE Malware Extension Compromise in $500k Crypto Heist
Cursor IDE, as many are aware, is a fork of the open source and popular VS Code IDE project from Microsoft. Similarly to VS Code, Cursor has support for IDE extensions, which prompts many developers to migrate over with their favorite extensions and long-lived workflows, shortcuts, themes, and other configurations. Back in May 2021, Snyk’s Security Labs conducted research that uncovered VS Code extensions vulnerable to insecure code patterns.
Navigating Security Flaws in Agentic Code
Navigating Security Flaws in Agentic Code.
Using Snyk to Check Security on Code Agent
Using Snyk to Check Security on Code Agent.
This Security Package Looks Useful... But Should You Trust It?
This Security Package Looks Useful… But Should You Trust It?
Cursor Built a Secure App with OWASP Best Practices
Cursor Built a Secure App with OWASP Best Practices.
Cursor Agents Code Remotely (and while you sleep...)
Cursor Agents Code Remotely (and while you sleep...)
Human + AI: The Next Era of Snyk's Vulnerability Curation
Years ago, we published the blog post, “Why do organizations trust Snyk to win the open source security battle?” which laid out the methodology and practices for building the Snyk Vulnerability Database.
How to Check AI-Generated Code for Vulnerabilities
How to Check AI-Generated Code for Vulnerabilities.
Minimizing False Positives: Enhancing Security Efficiency
Organizations waste enormous amounts of time chasing down security alerts that turn out to be nothing. Recent research from May 2025 shows that 70% of a security team's time is spent investigating alerts that are false positives, wasting massive amounts of time in the investigation rather than working on proactive security measures to improve organizational security posture.