Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Snyk

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident

Aug 27, 2025 By Liran Tal In Snyk
On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal. The attack also impacts the Nx Console VS Code extension.
Read Post

The Surprising Truth About GPT-5 in Cursor's Agent Mode

Aug 25, 2025 By Snyk In Snyk
In this video, I test out GPT-5 by asking it to build a simple and secure Node.js notes app that lets users create, read, update, and delete notes. I run two experiments — one without a security MCP server and one with it — to see how well the new model handles both functionality and security.
View Video
Snyk

Prioritize with Snyk's Open Source Vulnerability Experience

Aug 20, 2025 By Ryan McMorrow In Snyk
Prioritizing which vulnerabilities to fix across your application isn't always easy. Is it exploitable? Is it reachable? Will the update introduce breaking changes? Are there any other teams using this library that you should be aware of? What does the backlog look like if other changes need to be made? And that's just this week. Next week, it'll be the same thing all over again, with new discoveries, new version releases, and maybe even a new cybersecurity breach.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.