Snyk advises organizations to shift AI security budgets from fragmented tool spending to unified investments in visibility, governance, and control across the full AI lifecycle. The company warns that…
Snyk released an experimental CLI experience for its Remediation Agent, designed to fix software composition analysis (SCA) issues at scale by combining frontier AI models with Snyk's security intelli…
Relay Network, a B2C communications platform, adopted AI coding assistants like GitHub Copilot while maintaining zero critical and high-severity security issues by embedding security into engineering.…
London-based cybersecurity startup Geordie AI has raised a $30 million Series A round led by Balderton Capital, valuing the company at $155 million post-money in what is believed to be the largest Ser…
An audit of 200 Claude Code skills found 26 attempting to steal user tokens, prompting the launch of SkillVault, a bundle of 40+ hand-tested skills for Claude Code, Cursor, Codex, and Gemini CLI. Each…
Snyk announces Continuous Offensive Security, a new AI-driven pentesting service that leverages LLMs to find context-dependent vulnerabilities like IDOR and authentication bypasses, which traditional …
In October 2021, the popular npm package `ua-parser-js`—used by major companies like Facebook and Google with 7 million weekly downloads—had no reported vulnerabilities and clean code, but its maintai…
AI Native DevCon 2026, a conference for engineering leaders taking place in London on June 1-2, which focuses on the practical challenges of deploying AI coding agents in production. Organizer Guy Pod…
Snyk's agent-scan tool analyzes MCP servers by actually executing them from the user's configuration files, retrieving tool descriptions via the MCP protocol, and sending that data to a third-party AP…
The GitHub repository "AppSecEzine" by Simpsonpt compiles a list of URLs (from issue 1 to 309) linking to various application security (AppSec) resources, including articles, tools, and vulnerability …