A new benchmark, Snyk VulnBench JavaScript 1.0, reveals that large language models (LLMs) produce inconsistent vulnerability findings across repeated scans of the same JavaScript code, with 80 of 161 …
The US government ordered Anthropic to cut off foreign access to its Fable 5 and Mythos 5 AI models on June 12, 2026, citing a jailbreak risk that critics say is actually a routine defensive capabilit…
The US government ordered Anthropic to disable its Fable 5 and Mythos 5 AI models globally on June 12, 2026, just three days after their launch, due to national security concerns over Mythos 5's excep…
Snyk advises organizations to shift AI security budgets from fragmented tool spending to unified investments in visibility, governance, and control across the full AI lifecycle. The company warns that…
A new approach to secure AI code generation uses type-level security to make entire classes of web vulnerabilities uncompilable, inspired by Rust's memory safety guarantees and the Trusted Types API. …
Snyk released an experimental CLI experience for its Remediation Agent, designed to fix software composition analysis (SCA) issues at scale by combining frontier AI models with Snyk's security intelli…
Relay Network, a B2C communications platform, adopted AI coding assistants like GitHub Copilot while maintaining zero critical and high-severity security issues by embedding security into engineering.…
London-based cybersecurity startup Geordie AI has raised a $30 million Series A round led by Balderton Capital, valuing the company at $155 million post-money in what is believed to be the largest Ser…
An audit of 200 Claude Code skills found 26 attempting to steal user tokens, prompting the launch of SkillVault, a bundle of 40+ hand-tested skills for Claude Code, Cursor, Codex, and Gemini CLI. Each…
Snyk announces Continuous Offensive Security, a new AI-driven pentesting service that leverages LLMs to find context-dependent vulnerabilities like IDOR and authentication bypasses, which traditional …
In October 2021, the popular npm package `ua-parser-js`—used by major companies like Facebook and Google with 7 million weekly downloads—had no reported vulnerabilities and clean code, but its maintai…
AI Native DevCon 2026, a conference for engineering leaders taking place in London on June 1-2, which focuses on the practical challenges of deploying AI coding agents in production. Organizer Guy Pod…
Snyk's agent-scan tool analyzes MCP servers by actually executing them from the user's configuration files, retrieving tool descriptions via the MCP protocol, and sending that data to a third-party AP…
The GitHub repository "AppSecEzine" by Simpsonpt compiles a list of URLs (from issue 1 to 309) linking to various application security (AppSec) resources, including articles, tools, and vulnerability …