The newest AI resources are on the AI page. For a reading order instead of a date order, see the AI learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-06-09 2026 | Indirect Prompt Injection Exposes a Universal AI Security Flaw No Deployment Model Is Immune intermediate 4 min read | Analysis of indirect prompt injection attacks, demonstrated against Mozilla Tabstack and Cotypist, reveals a universal LLM vulnerability that bypasses cloud-based and local deployments. This architectural flaw, stemming from LLMs' inability to distinguish instructions from data, creates systemic risk for enterprises adopting GenAI, irrespective of their chosen deployment model. The findings emphasize the need for architectural solutions over deployment choices to address security challenges in enterprise AI. |
| 2026-06-09 2026 | Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever advanced 10 min read RCE | Analysis of Anthropic's Claude Mythos, an unreleased frontier model capable of autonomously discovering zero-days and developing working exploits, highlights the accelerating trend of AI in vulnerability research. While current access is limited to responsible parties, the paper warns of an impending surge in AI-discovered CVEs and the subsequent rise of AI-assisted patch-diffing by attackers. It advocates for the integration of AI into AppSec programs and security tooling to proactively identify and remediate vulnerabilities before they can be weaponized. → wiz.io |
| 2026-06-09 2026 | Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection intermediate 5 min read API Sec | Library integrating Wiz and Cloudflare for end-to-end AI application security, offering unified visibility into AI endpoints and DNS exposure. It maps AI workloads to infrastructure and identifies sensitive data risks, extending visibility to edge protections like Cloudflare. This allows detection of threats such as prompt injection and shadow AI, enabling teams to secure exposed AI services and validate continuous guardrail protection. → wiz.io |
| 2026-06-09 2026 | Securing AI Applications From Inception to Deployment beginner 5 min read RCE | Library extending Wiz AI-APP to secure AI applications by detecting risks at inception, validating exploitability at runtime with Red Agent, and orchestrating remediation with Green Agent. It connects code-level findings to cloud and runtime layers, mapping risks to their precise code root cause and generating tailored fixes. The library supports SAST, SCA, IaC scanning, and secrets scanning, integrating with IDEs and CLI, and aligning with OWASP Top 10 for LLM Applications 2025 and Agentic Applications 2026. → wiz.io |
| 2026-06-09 2026 | IaC Inventory: A Unified View Across Code, Deployments, and Cloud beginner 6 min read | Library for Infrastructure-as-Code (IaC) security, offering unified visibility across code, deployments, and cloud resources. It connects IaC modules to deployed resources, enabling instant risk scoping for AI workloads like Bedrock Agents and Guardrails. The tool supports Pulumi, Terraform, CloudFormation, and Bicep, catching misconfigurations pre-deployment and facilitating precise remediation by mapping issues back to the source code. → wiz.io |
| 2026-06-09 2026 | Closing the Security Gap in the Age of Agentic Coding intermediate 5 min read | Library for real-time scanning and fixing of AI-generated code within AI-native IDEs and copilots. Wiz Code plugins and skills, powered by the Wiz MCP server and WizCLI, integrate Wiz's security knowledge, enabling developers to catch and fix issues like hardcoded secrets, IaC misconfigurations, vulnerable dependencies, and malware at inception. The Green Agent facilitates rapid, context-aware remediation, allowing security teams to trigger fixes and developers to resolve issues directly in their IDEs, supporting secure development in the age of agentic coding. → wiz.io |
| 2026-06-09 2026 | Wiz Code Week Recap: Securing AI Native Development beginner 4 min read | Library for securing AI-native development, Wiz Code offers visibility into AI frameworks like Gemini Code Assist and GitHub Copilot via an AI-BOM. It integrates security guardrails directly into IDEs with Wiz Code plugins for Cursor and Claude Code, catching issues like hardcoded secrets and prompt injection before code commits. Remediation is streamlined with Wiz Skills, allowing coding agents to apply fixes, and CI/CD pipelines are secured by modeling them as assets, identifying dangerous configurations and surfacing findings from a CI-BOM. → wiz.io |
| 2026-06-09 2026 | Key Takeaways from the 2026 State of AI in the Cloud Report beginner 3 min read | Survey of AI security in cloud environments, detailing how AI has become foundational infrastructure. The 2026 State of AI in the Cloud report highlights 81% cloud environments use managed AI services and 90% run self-hosted AI, with 68% ingesting models via third-party software. AI-assisted development is default, leading to systemic weaknesses in 20% of organizations using AI platforms. Autonomous agents and MCP servers expand attack surface, enabling lateral movement. AI reduces exploitation costs by accelerating discovery and development, seen in malware dynamically generating commands and attackers abusing AI-enabled OAuth. This report covers AI-assisted zero-day discovery, exemplified by Anthropic's Claude Mythos. → wiz.io |
| 2026-06-09 2026 | The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) intermediate 8 min read Supply Chain | Analysis of AI-powered GitHub Actions reveals critical vulnerabilities including bypasses of non-default configurations allowing external attackers to trigger AI execution, and a novel secret exfiltration vector for dynamically-created credential files like those from `google-github-actions/auth@v2`. Widespread misconfigurations affect numerous repositories, exacerbated by prompt injection risks and the confusing deputy bypass technique, where attackers can leverage `dependabot` to impersonate trusted actors. → wiz.io |
| 2026-06-09 2026 | 280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII intermediate 5 min read Secrets | Library of scripts for detecting security flaws in AI agent skills, specifically addressing how popular tools like OpenClaw and ClawHub can inadvertently expose API keys and PII. Researchers found 283 vulnerable skills in the ClawHub marketplace, detailing flaws in specific examples such as `moltyverse-email`, `buy-anything`, `prompt-log`, and `prediction-markets-roarin`. These vulnerabilities stem from instructions that lead agents to mishandle secrets by passing them through LLM context windows or outputting them in plaintext logs. The library includes tools like `mcp-scan` and `Snyk AI-BOM` for auditing and remediation. → snyk.io |
| 2026-06-09 2026 | How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware intermediate 5 min read Supply Chain | Library for securing AI agents, focusing on the "google-qx4" malicious Google Skill on ClawHub that tricked users into installing malware via social engineering in the SKILL.md file. This technique bypasses traditional AppSec by leveraging agent-driven social engineering and legitimate-looking hosts like Rentry and GitHub, confirming "ToxicSkills" research predictions. It offers solutions like `mcp-scan` for skill analysis and Snyk AI-BOM for inventory, with Evo by Snyk providing AI-native security to monitor agent behavior and prevent malicious command execution. → snyk.io |
| 2026-06-09 2026 | Why Your “Skill Scanner” Is Just False Security (and Maybe Malware) intermediate 6 min read Supply Chain | Library for AI agent security, mcp-scan (part of Snyk's Evo platform), uses a specialized LLM to understand the intent and capabilities of SKILL.md files beyond simple keyword matching. Unlike traditional regex-based scanners that fail against natural language variations, prompt injection, and contextual risks, mcp-scan performs behavioral analysis to detect malicious actions such as data exfiltration or attempts to override safety instructions. This AI-native approach aims to provide more robust security than tools like SkillGuard, Skill Defender, and Agent Tinman which have shown limitations. → snyk.io |
| 2026-06-09 2026 | From Acceleration to Exposure: Why AI Demands Mature AppSec beginner 3 min read | Library: This article discusses how immature application security practices, when combined with AI-driven development, scale existing risks and amplify exposure. Autonomy in AI systems leads to rapid compounding of errors in code, dependencies, and configurations, outstripping traditional visibility and detection methods. Mature AppSec, focusing on enforceable policies and continuous assurance, enables organizations to safely leverage AI's acceleration without sacrificing oversight or trust, transforming potential liabilities into genuine accelerators. → snyk.io |
| 2026-06-09 2026 | The Future of AI Agent Security Is Guardrails intermediate 14 min read | Library for AI agent security, it advocates for "guardrails" as the future of protecting autonomous agents from unintended actions like credential exfiltration or unauthorized command execution. Instead of focusing on smarter models, this approach implements security checkpoints within the agent's execution pipeline. These checkpoints, including access hooks for least privilege, pre-execution hooks for sanitizing tool calls (preventing prompt injection and enforcing input validation), and post-execution hooks for filtering LLM output, act as a dynamic defense against vulnerabilities exposed by agentic AI, exemplified by issues seen with OpenClaw. → snyk.io |
| 2026-06-09 2026 | Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric intermediate 5 min read | Library enhancing Snyk Studio provides capabilities for securing AI-driven development, integrating with tools like Gemini CLI and Claude Code. It offers streamlined setup, real-time security guardrails, and introduces Remediation Directives for automated pull requests to fix vulnerabilities. New governance and control features, including an Adoption report, allow enterprises to manage and scale AI development securely, creating an AI Security Fabric. → snyk.io |
| 2026-06-09 2026 | Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain intermediate 8 min read Supply Chain | Library for securing agent skill ecosystems, this resource details Snyk's integration with Vercel's skills.sh marketplace to perform automated security analysis on AI agent skills. It employs a deep multi-layer approach using LLM-based judges and deterministic rules to detect vulnerabilities in both code and natural language instructions, identifying "toxic flows" and prompt injection. The system aims for high recall on malicious skills with zero false positives, providing a "Security Verified" badge on skill pages and enabling continuous monitoring of the evolving threat landscape. → snyk.io |
| 2026-06-09 2026 | How “Clinejection” Turned an AI Bot into a Supply Chain Attack intermediate 9 min read Supply Chain | Writeup detailing the "Clinejection" vulnerability chain, which leveraged indirect prompt injection against an AI triage bot and GitHub Actions cache poisoning to enable supply chain attacks. This exploit, discovered by Adnan Khan, allowed an attacker to gain access to production credentials and publish a malicious version of the Cline CLI to npm, installing the OpenClaw AI agent. The analysis highlights how combined vulnerabilities, including credential model weaknesses and dangling commits, can create significant risks in CI/CD pipelines, emphasizing the need for robust security collaborations. → snyk.io |
| 2026-06-09 2026 | Claude Code Security: A Welcome Evolution in the Remediation Loop beginner 5 min read | Library that unifies LLM-native capabilities with deterministic validation and operational automation to address the evolving application security landscape. It combines AI reasoning for discovery with robust enforcement mechanisms, addressing vulnerabilities introduced by AI-assisted development, including injection risks and business logic flaws. The library facilitates AI-accelerated DevSecOps, secures AI-driven development workflows through automated remediation directives, and extends protection to AI-native applications with visibility and policy enforcement, aiming to close the detection-to-remediation loop reliably. → snyk.io |
| 2026-06-09 2026 | Snyk and uv, Better Together intermediate 3 min read Python | Library for Python package management, uv, now integrates with Snyk to provide enhanced application security. This partnership enables users to export CycloneDX SBOMs directly from uv (version 0.9.11 and later) and then scan these SBOMs with Snyk for vulnerabilities and license compliance issues. Native uv support is also being integrated into the Snyk CLI, IDE integrations, and agentic workflows, aiming to make security a seamless part of the development process for AI-native Python applications. → snyk.io |
| 2026-06-09 2026 | The Rise of the AI Security Engineer: A New Discipline for an AI-Native World beginner 8 min read | Survey of emergent AI security roles, detailing the responsibilities and required mindset for an AI Security Engineer. This discipline addresses novel threats like prompt injection, memory exploitation, model poisoning, and agent hijacking, which challenge traditional security models due to AI's non-deterministic nature. It advocates for an adaptive, builder-defender approach operating at machine speed to secure AI-native systems and build trust. → snyk.io |
| 2026-06-09 2026 | Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard beginner 7 min read | Library for scanning agent skills in the Tessl Registry, integrating Snyk's security analysis to detect prompt injection, malware, and toxic flow patterns. This partnership provides real-time security scores on skill pages and search results, addressing the unique risks of agent skills by analyzing natural language instructions alongside code. The system automatically scans new skills and backfills existing ones, offering developers visibility into potential vulnerabilities before installation, inspired by Snyk's research into malicious skills and Snyk Learn lessons on agent goal hijack. → snyk.io |
| 2026-06-09 2026 | I Read Cursor's Security Agent Prompts, So You Don't Have To intermediate 15 min read | Library providing open-source prompts for autonomous AI security agents, capable of reviewing thousands of pull requests weekly and identifying hundreds of vulnerabilities. The prompts emphasize a clear role assignment, goal, methodology, and priority list, demonstrating that concise instructions can drive effective security reviews. This approach leverages LLMs' understanding of common vulnerabilities like SQL injection and unsafe deserialization, integrating them into production-grade agent orchestration platforms for enhanced security scanning. → snyk.io |
| 2026-06-09 2026 | AI Is Building Your Attack Surface. Are You Testing It? beginner 6 min read | Library for intelligent dynamic testing that addresses the unique security challenges posed by AI-generated code and AI agents. It focuses on confirming real exploitability, specifically targeting flaws like BOLA and IDOR in APIs accessed by agents, and correlates static analysis findings with dynamic testing results to prioritize high-confidence fixes. The library aids in discovering undocumented API endpoints and provides continuous coverage within the development pipeline, aiming to distinguish actual vulnerabilities from noise and enable developers to ship code with confidence. → snyk.io |
| 2026-06-09 2026 | The Next Era of AppSec: Why AI-Generated Code Needs Offensive Dynamic Testing intermediate 6 min read | Library for advanced dynamic security testing, integrating code-level intelligence with runtime interaction. This approach moves beyond traditional SAST and DAST by combining static code analysis, even agentic AI-driven analysis, with the ability to observe and exploit vulnerabilities in live, distributed systems. It enables grey-box testing, correlating runtime exploitability with precise code-level origins for faster remediation, and is crucial for identifying emergent threats in AI-generated code and complex microservice architectures. → snyk.io |
| 2026-06-09 2026 | Introducing Agent Security beginner 6 min read | Library for securing AI agents, Evo AI-SPM provides visibility, intelligence, and enforcement across the AI lifecycle. It discovers AI components in code and workflows, assesses associated risks, and enables policy enforcement to prevent unsafe configurations and behaviors. Features include Agent Scan for vetting agent dependencies, Snyk Studio for securing AI-generated code, Agent Guard for real-time behavior monitoring, Agent Red Teaming for attack simulation, and Snyk API & Web for dynamic testing against vulnerabilities like BOLA. → snyk.io |
| 2026-06-09 2026 | From Discovery to Defense: Why AI Red Teaming Is the Next Step After AI-SPM intermediate 6 min read | Library of techniques for AI Red Teaming and Dynamic Security Testing (DAST), emphasizing their convergence. This approach combines the exhaustive nature of traditional DAST with the contextual reasoning of AI-driven pentesting, enabling the discovery of complex business logic flaws and authorization issues that arise from inter-component interactions or emergent AI behaviors like prompt injection. By correlating runtime exploitability with source code context, this library facilitates more accurate vulnerability identification and streamlined remediation, moving beyond static analysis limitations. → snyk.io |
| 2026-06-09 2026 | Gartner urges multilayered defenses as AI deepfakes and LLM threats surge news 2 min read | Analysis of Gartner's "Threat environment response strategies for 2026–2027" highlights surging threats including deepfakes, AI application compromise, prompt injection against LLMs, and software supply chain attacks. These evolving risks, amplified by AI advancements, necessitate multilayered defense strategies. Corporations must strengthen business processes, enhance security awareness, adopt deepfake detection, implement robust AI security testing throughout the development lifecycle, and apply strong security controls to effectively counter these sophisticated cyberattacks. |
| 2026-06-09 2026 | Indirect Prompt Injection remains a fundamental security challenge for AI intermediate 7 min read | Library of techniques addressing indirect prompt injection, a fundamental LLM security challenge. This vulnerability allows attackers to embed instructions within untrusted external content, like webpages or local documents, which an LLM then executes. Case studies examine Mozilla Tabstack (cloud-hosted) where an agent was hijacked to exfiltrate conversation history, and Cotypist (on-device) where an LLM suggested inaccurate content and surfaced credentials. The core issue is the LLM's inability to reliably distinguish instructions from data within a shared context window, regardless of whether the model runs locally or in the cloud. |
| 2026-06-08 2026 | Brave AI Browsing Faces Prompt Injection Risk intermediate | Library for identifying indirect prompt injection vulnerabilities in AI features. Brave's AI browsing is susceptible to this flaw, where malicious commands are embedded within external content, causing AI models to execute unintended instructions. The vulnerability arises from the AI's inability to distinguish between developer-provided instructions and hidden commands within its context window, affecting both cloud-based and on-device models. |
| 2026-06-08 2026 | The Meta hack shows theres more to AI security than Mythos news 5 min read | Analysis of the Meta hack highlights AI agent vulnerabilities beyond sophisticated threats like Mythos. Attackers exploited Meta's AI customer support by requesting direct account email changes, leading to account takeovers like the dormant Obama White House account. Experts, including Neil Gong and Somesh Jha, warn that as AI automates workflows, simpler attacks on the agents themselves will increase, necessitating rigorous red-teaming and traditional guardrails despite the inherent security-utility trade-off. |
| 2026-06-08 2026 | A Framework for AI Threat Readiness beginner 13 min read | Framework for AI Threat Readiness, a structured approach to managing evolving security risks, emphasizes speed of action and breadth of visibility. It details strategies for eliminating critical risks, reducing exposure through AI-driven analysis, and accelerating patching and response times. The framework highlights the need for continuous discovery and mapping of internet-facing assets, exposure control, AI-driven risk validation, and established remediation processes, all crucial as AI models accelerate vulnerability discovery and exploitation. → wiz.io |
| 2026-06-08 2026 | Building AI Security with Our Customers: 5 Lessons from Evo’s Design Partner Program beginner 6 min read | Library for securing generative AI, Evo AI-SPM, addresses AI sprawl and shadow AI through its Discovery Agent, which uncovers models and agents. It features Custom Discovery to detect bespoke AI implementations invisible to standard tools, and Snyk Generated Policies offering out-of-the-box, continuously enforced policies for governance. The Risk Intelligence Agent provides actionable risk signals for AI models, agents, and MCP servers, while the Policy Agent enables CI/CD pipeline enforcement and operational security for AI components. → snyk.io |
| 2026-06-08 2026 | You Patched LiteLLM, But Do You Know Your AI Blast Radius? beginner 6 min read | Library for understanding AI system blast radius; it maps model gateways like LiteLLM, identifying routed providers and models, connected tools, APIs, and agent workflows to reveal unseen risks beyond traditional dependency analysis, enabling better incident response by showing what the compromised component actually accessed. → snyk.io |
| 2026-06-08 2026 | Secure What Matters: Scaling Effortless Container Security for the AI Era beginner 4 min read | Library enhancements from Snyk Container streamline inventory management with automated registry monitoring and customizable import/pruning rules. New beta features offer a unified platform experience, prioritize vulnerabilities based on runtime intelligence from third-party signals, and provide flexible support for multiple profiles in complex environments. These updates bolster security for the AI era by providing scalable visibility and automated remediation at the speed of agentic AI. → snyk.io |
| 2026-06-08 2026 | Governing Security in the Age of Infinite Signal – From Discovery to Control beginner 7 min read | Analysis of AI's impact on application security, particularly the capabilities of Anthropic's Claude Mythos for vulnerability discovery. The article emphasizes the shift from mere detection to essential control and governance, highlighting that AI's advanced reasoning abilities do not replace the need for deterministic enforcement, consistent policies, and auditable risk. It argues that enterprises must focus on controlling AI-generated code and the AI tools themselves within the software supply chain, integrating AI models, deterministic rulesets, and human expertise for a comprehensive security posture. → snyk.io |
| 2026-06-08 2026 | Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure beginner 4 min read | Library for Snyk Agent Fix utilizing an agentic architecture, moving from static fine-tuning to dynamic few-shot prompting. This approach integrates Snyk's security intelligence, including a database of over 35,000 vulnerabilities and expert-written fixes, with frontier models like Anthropic's. Benchmarking focuses on security integrity (Pass@1/Pass@5), functional logic, and golden tests. The system supports agentic retries to adapt responses based on initial failures and offers full language coverage for all Snyk Code-supported languages, enabling faster, more secure code remediation. → snyk.io |
| 2026-06-08 2026 | Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira beginner 2 min read | Integration between Snyk and Atlassian offers intelligent, autonomous remediation for Jira security tickets. This solution leverages Snyk Studio's agentic skills, such as "snyk-fix" and "secure-at-inception," to autonomously generate and validate fixes within an Agentic Development Environment (ADE). By ingesting vulnerability data from Jira and utilizing Atlassian's TWG CLI or other CLIs, developers can reduce Mean Time to Resolution (MTTR), eliminate context switching, and improve fix accuracy, transforming security from a manual chore into an automated process. → snyk.io |
| 2026-06-08 2026 | Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future beginner 3 min read Supply Chain | Reference on Snyk's evolving go-to-market strategy, detailing its expansion beyond product-led growth to address the challenges of securing AI-generated code at scale. It highlights deep integrations with partners like Anthropic, Cursor, AWS, Atlassian, and OpenAI, and introduces a Partner Services Delivery Program and Partner Accelerator Fund designed to enable partners to build AI security practices and generate professional services revenue, emphasizing an ecosystem approach to application security in the AI era. → snyk.io |
| 2026-06-08 2026 | Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop beginner 5 min read | Library integrating Evo by Snyk with Anthropic's Claude Enterprise, providing security and compliance teams with an inventory of Claude environment models, MCP servers, risk signals, and tool-level permissions. Additionally, the Snyk Security Desktop Extension is now available for Claude Desktop on macOS and Windows, embedding real-time scanning and vulnerability context directly into developer workflows to catch issues at inception and ensure least privilege on AI agent tools. → snyk.io |
| 2026-06-08 2026 | Continuous Offensive Security: The Line We've Been Walking beginner 12 min read Fuzzing | Library for continuous offensive security testing, bridging Dynamic Security Testing (DAST) with AI-driven capabilities. It addresses both heuristic-detectable vulnerabilities like SQL injection and cross-site scripting, and context-dependent flaws such as BOLA, IDOR, and chained exploits by mimicking human pentester reasoning. The library also includes Agent Red Teaming to proactively test the new attack surfaces created by LLM-integrated applications and AI agents, automatically adapting testing strategies based on discovered components. → snyk.io |
| 2026-06-08 2026 | How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development beginner 7 min read Supply Chain | Library integrating Snyk with GitHub Copilot enables secure AI-assisted coding by shifting security left. Custom pre-commit hooks scan code in real-time, catching vulnerabilities like insecure dependencies during development. This empowers developers to fix issues immediately, reducing the mean time to remediate (MTTR) and accelerating technical growth. → snyk.io |
| 2026-06-08 2026 | Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI intermediate 6 min read Secrets | Library for automating software composition analysis (SCA) remediation within the terminal. This tool empowers developers to address vulnerabilities at scale by integrating Snyk's security intelligence with large language models (LLMs). It analyzes findings, provides fix context including version upgrades and breakability analysis, and enables iterative, LLM-guided remediation loops with developer review, aiming to improve fix rates for SCA issues. → snyk.io |
| 2026-06-08 2026 | OpenAI Launches Lockdown Mode Against Prompt Injection Attacks beginner 3 min read | Library for defending against prompt injection attacks in large language models, featuring OpenAI's Lockdown Mode. This security feature adds validation layers to detect and restrict suspicious input patterns associated with attempts to override instructions, extract training data, or manipulate output. While not a complete solution, it significantly raises the bar for attackers, making it harder for malicious prompts to leak sensitive enterprise data, and pressures competitors like Google, Microsoft, and Anthropic to enhance their own AI security. |
| 2026-06-08 2026 | Securing CI/CD in an agentic world: Claude Code Github action case intermediate 10 min read | Library for securing CI/CD workflows, this entry details a vulnerability in Anthropic’s Claude Code GitHub Action. The Read tool within the action was not sandboxed like the Bash tool, allowing it to access `/proc/self/environ` and potentially exfiltrate sensitive secrets like `ANTHROPIC_API_KEY`. This vulnerability, discovered by Microsoft Threat Intelligence and addressed in version 2.1.128, highlights the risks of AI agents processing untrusted GitHub content in CI/CD environments, particularly when granted file-read capabilities or access to secrets. Prompt injection via HTML comments and disguised feature requests are illustrated as attack vectors. → microsoft.com |
| 2026-06-08 2026 | Evidence at the Moment of Attack. Answers at AI Speed. intermediate 5 min read | Library for automated cloud security investigations, Wiz Forensics captures forensic artifacts at the moment of detection. This addresses the challenge of ephemeral cloud workloads and fileless attacks by collecting data like script executions, process trees, and memory payloads before they disappear. AI analysis of these collected artifacts accelerates investigation for SOC and IR teams, transforming raw data into actionable insights and confident verdicts on threats like SQL injection, data exfiltration, and multi-stage attacks, as seen with the Soco404 campaign and JINX-0164. → wiz.io |
| 2026-06-08 2026 | AI Threat Readiness Pillar 1: Reduce Critical Exposures & Scan with AI beginner 6 min read | Library for AI-powered application security scanning. It focuses on reducing critical exposures by providing unified visibility across cloud, SaaS, and AI environments. The library employs techniques like Attack Surface Management (ASM) and an AI attacker emulation tool, "Red Agent," to identify and validate exploitable risks, including authorization flaws, business logic weaknesses, and complex API attack chains. It correlates external findings with internal environmental context to prioritize based on business impact and leverages an "AI remediator," "Green Agent," for context-aware guidance and workflow automation. → wiz.io |
| 2026-06-08 2026 | Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection intermediate 6 min read | Library net.jqwik:jqwik-engine version 1.10.0, released by the maintainer, contained protestware utilizing prompt injection. This version, intended to deter AI coding agents, hid instructions to disregard previous commands and delete jqwik tests and code using ANSI terminal codes, making them invisible to humans but readable by automated systems. While at least one AI agent successfully identified and refused the injection, this incident highlights supply chain risks where tool output can be interpreted as commands, emphasizing the need to treat such output as untrusted input. → snyk.io |
| 2026-06-08 2026 | The New Security Risks of the Agentic Development Lifecycle beginner 7 min read | Library for securing the agentic development lifecycle, which involves AI agents planning, building, modifying, testing, and shipping software by interacting with tools, codebases, and environments. This shifts the security focus from artifact inspection to trusting the creation process, addressing risks introduced by agents' inputs (e.g., malicious skills, flawed MCP servers), actions (e.g., unsafe command execution, unauthorized access), and generated outputs (e.g., insecure code patterns). → snyk.io |
| 2026-06-08 2026 | Type Level Security: The future of secure AI code generation? beginner 6 min read | Library demonstrating type-level security to prevent common vulnerabilities like Insecure Direct Object Reference (IDOR) and DOM XSS. It showcases how Rust's strong type system and Python's type hints can enforce security invariants, ensuring that data like user IDs or strings are only used after proper authentication and sanitization. The approach aims to make entire classes of security bugs uncompilable or un-type-checkable, applicable to both human developers and AI code generation. → snyk.io |
| 2026-06-08 2026 | So You Have an AI Security Budget. Now what? beginner 9 min read | Library for AI security budgeting that shifts focus from fragmented tool spending to unified investment in visibility, governance, and control across the AI lifecycle. It emphasizes securing agentic development and agentic applications by funding AI discovery, risk assessment, policy enforcement, adversarial testing, runtime protection, and governance evidence, addressing vulnerabilities like CVE-2025-6514 and issues seen in incidents like Replit's data deletion. → snyk.io |