Category index

Cyber Security

4276 articles

4276 ARTICLES

FEATURED REPORT

Hackers abuse parental controls to hijack Google accounts

Learn how attackers are re-casting adults as minors to bypass recovery and lock users out.

BY Zaria Vuksan

MIN READ 1 MIN READ

EXPLORE north_east

Hackers abuse parental controls to hijack Google accounts

CYBERSECURITY

Spectra Analyze, Spectra Core Update: Deeper Detection, Smarter Analysis

RL threat detection and binary analysis can now close the gap for threat hunters.

1 MIN READ arrow_forward

CYBERSECURITY

A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office

Go behind the scenes with Lulu, a Strategy Co-Op at Snyk, and discover a day balancing high-impact AI security projects with a vibrant Boston office culture.

1 MIN READ arrow_forward

CYBERSECURITY

Agentic Engineering at Prisma

Part of Prisma’s agentic software development series on how it ships software with AI agents, covering the process, roles, and documentation layer that make cross-repo agent work possible.

1 MIN READ arrow_forward

CYBERSECURITY

The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

A day after the AntV npm supply chain attack, the same campaign appears to have struck durabletask, a Microsoft-associated Python package on PyPI. Snyk has coverage in the vulnerability database and package health pages. Here’s what we know.

1 MIN READ arrow_forward

CYBERSECURITY

durabletask: TeamPCP's Latest PyPi Compromise

Discover the latest on malicious versions of the pypi package durabletask, matching TeamPCP tactics.

1 MIN READ arrow_forward

CYBERSECURITY

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals, including Vanilla Tempest and Storm groups, to more effectively distribute malicious code, including ransomware. The post Exposing Fox Tempest: A malware-signing service operation appeared first on Microsoft Security Blog.

1 MIN READ arrow_forward

CYBERSECURITY

Introducing Runtime Threat Detection for Google Cloud Run

Wiz Runtime Sensor support for Google Cloud Run Containers is now generally available, giving teams real-time threat detection and response for their serverless container workloads.

1 MIN READ arrow_forward

CYBERSECURITY

The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave

Multi-ecosystem supply chain compromise by TeamPCP targets GitHub, NPM, and VSCode to steal credentials and establish persistence.

1 MIN READ arrow_forward

CYBERSECURITY

Building for the AI era: Chainguard partners with Endor Labs

Chainguard and Endor Labs help teams build securely at AI speed with source-built artifacts, exploitability analysis, and fewer vulnerabilities to triage.

1 MIN READ arrow_forward

CYBERSECURITY

How to use AI coding tools safely and responsibly

Practical security guidelines for developers using AI coding assistants — token scopes, secrets management, sandboxing, prompt injection, and reviewing generated code.

1 MIN READ arrow_forward

CYBERSECURITY

Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)

The Mini Shai-Hulud npm worm compromised 314 packages in the AntV ecosystem on May 19, 2026 — including echarts-for-react and timeago.js.

1 MIN READ arrow_forward