A report from VentureBeat traces the rise of AI-related software incidents, citing that 45% of AI-generated code changes require debugging in production and the 2025 DORA report found a 10% increase i…
AI-generated code introduces security risks that developers often overlook, according to a new analysis comparing automated code auditing tools. The report finds that generic large language models pri…
Snyk, a developer security platform, warns that AI applications are exposed to 'chained risk' because traditional security tools like DAST, AI penetration testing, and AI red teaming each see only par…
Ventrova's sentinel-scan-cli, Cisco's mcp-scanner, and Snyk Agent Scan (formerly Invariant Labs' mcp-scan) are compared as open-source security scanners for MCP servers. The comparison highlights diff…
Snyk, a security company, has introduced a model risk evaluation framework that measures the security risk of large language models by running them as agents in dynamic environments against adaptive a…
Snyk's VulnBench benchmark found that large language models (LLMs) are not fully repeatable in security reviews: across 300 scans of 10 JavaScript projects with 6 configurations repeated 5 times, 84.8…
Snyk research found six new security issues for every one remediated, prompting the company to launch Remediation Agent in public preview, available at no additional cost to all current Snyk customers…
Snyk's benchmark of ~150 vulnerable code samples in JavaScript, Java, and Python found that out-of-the-box frontier models cluster at 72–75% secure-and-functional fix rates, but Snyk Intelligence (the…
Researchers from MATS, ELLIS Tübingen, the Max Planck Institute for Intelligent Systems, and Snyk demonstrated that encrypted chain-of-thought reasoning traces from OpenAI, Anthropic, and Google APIs …
Aikido Security's 2026 State of AI in Security and Development report found that 90% of organizations using 6-8 security tools experienced an incident, compared with 64% of those using 1-2 tools, and …
Researchers from the ELLIS Institute Tübingen, the Max Planck Institute, MATS, and Snyk demonstrated that encrypted chain-of-thought reasoning from frontier AI models can be replayed into cheaper sibl…
Security researchers from MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and Snyk found that Anthropic, OpenAI, and Google use a single global encryptio…
Docker, Snyk, and Keycard launched Agent Baseline v1.0 at Black Hat 2026, a blueprint defining six security outcomes and 35 controls for enterprise agent deployment. The framework addresses risks from…
A 2025 Veracode analysis of over 100 large language models found that 45% of AI-generated code causes known security issues and vulnerabilities, while human review effectiveness drops after 400 lines …
Snyk, Docker, and Keycard released the Agent Baseline, a framework defining six security outcomes and 35 controls for enterprise AI agents, and are seeking public comment. The framework aims to cut th…
Computer scientists at the University of Tübingen, the Max Planck Institute, MATS Research, and Snyk discovered a method to extract hidden reasoning from frontier AI models, revealing that Chinese mod…
A developer's comparison of six enterprise Software Composition Analysis (SCA) tools in 2026 highlights Aikido Security as the strongest all-around pick for teams seeking SCA without a six-figure line…
A developer built BugZ AI, an open-source vulnerability scanner and automated patching engine that generates exact Git patch files to fix security issues. The tool uses Next.js, Convex, Clerk, and AI …
A Snyk security audit of the Agent Skills ecosystem, including Anthropic's Claude and Vercel, found that 36% of all skills contained at least one critical-level security issue, such as malware distrib…
Anthropic shipped the Claude Security Plugin for Claude Code in public beta on July 22, a multi-agent vulnerability scanner that runs in the terminal and finds bugs that rule-based tools like Semgrep …