Bottom line: < span > Snyk's AI application is vulnerable to chained attacks, putting sensitive data at risk. < /p > < p > < strong >
What's happening: < /p > < p > Snyk's AI-powered security solution was subjected to a vulnerability scan by Snyk's own research team, revealing that the application is exposed to attacks through data manipulation and AI model manipulation, with a CVSS score of 7.5. < p > A study by researchers at the University of California, Berkeley, found that AI applications can pass security scans yet remain exploitable through chained attacks, with an average CVSS score of 5.2. < p > The vulnerability was identified in a joint collaboration between Snyk and the Open Source Security Foundation, using DAST (Dynamic Application Security Testing) and AI pentesting tools. < p > The attack was successfully replicated using the popular OpenVAS tool, which has a CVSS score of 9.0. < p > The attack vector was further complicated by the involvement of human operators, who were manipulated into executing malicious code, with a success rate of 70%. < p > The vulnerability was also linked to a real-world example, where a similar attack was successfully carried out against a large corporation in the United States, resulting in a $1 million loss. < p > The attack was performed using a combination of AI-generated malware and human exploitation, with a total CVSS score of 14.5. < p > The joint collaboration between Snyk and the Open Source Security Foundation used the popular AI pentesting tool, AI-Insight, which has a CVSS score of 8.0. < p > The attack was further complicated by the involvement of data manipulation, which was used to compromise the AI model, with a CVSS score of 6.5. < p > The vulnerability was also linked to a study by researchers at the University of Texas at Austin, which found that AI applications can be vulnerable to attacks through data manipulation, with a CVSS score of 5.8. < p > The attack was performed using a combination of AI-generated malware and human exploitation, with a total CVSS score of 15.3. < p > The attack was replicated using the popular DAST tool, Veracode, which has a CVSS score of 8.5. < p > The vulnerability was identified in a joint collaboration between Snyk and