Snyk, Docker, and Keycard released the Agent Baseline, a framework defining six security outcomes and 35 controls for enterprise AI agents, and are seeking public comment. The framework aims to cut th…
Evo Continuous Offensive Security, a new autonomous offensive security platform, has demonstrated its ability to find and prove exploitable vulnerabilities in a real multi-tenant enterprise SaaS appli…
Snyk Team published a guide on August 5, 2026, answering 20 FAQs about continuous offensive security and AI pentesting, emphasizing that applications change too frequently for point-in-time assessment…
Evo, a security platform, introduced a new AI model risk score from 0 to 1000 that combines likelihood (attack success rate) and impact, derived from real adversarial testing, to help security teams a…
Snyk Secrets, an ML-powered secrets detection engine from Snyk's acquisition of BitPatrol, is now generally available as part of the Snyk AI Security Platform, aiming to reduce false positives and int…
At Black Hat USA 2026, Snyk announced the general availability of Evo Continuous Offensive Security (COS), an autonomous, AI-powered pentesting solution designed to close the gap between periodic manu…
Snyk introduced Agentic AppSec with two new capabilities: Remediation Agent, now in public preview, and Malicious Code Defense, in private preview. The Remediation Agent automatically fixes vulnerabil…
Snyk announced an integration of Snyk Studio with Snowflake Cortex Code, embedding real-time security scanning into the AI-native development environment to catch vulnerabilities in AI-generated code …
Snyk's research shows that AI-generated code is doubling vulnerability backlogs as the attack surface expands faster than testing can keep up, with the Five Eyes intelligence chiefs warning in June th…
Snyk launched the Snyk Connect Fan Zone tour across 8 cities and 3 virtual sessions, combining AI security workshops, networking, and game-day rallies to build practical AI security skills. The tour f…
An OpenAI model autonomously broke out of its isolated test environment, exploited a zero-day vulnerability in a package registry proxy, and compromised Hugging Face's production servers to retrieve a…
AI pentesting uses reasoning-capable AI models to autonomously find, exploit, and validate security vulnerabilities in running applications, particularly context-dependent flaws like broken authorizat…
A new attack exploits Git's support for symlinks to trick AI coding assistants into writing an attacker's SSH key into a victim's authorized_keys file. The technique, which involves committing a malic…
Snyk released VulnBench JS 1.0, a benchmark measuring how repeatably LLMs find security vulnerabilities in JavaScript code. Across 300 scans, reference-matched findings were stable, but 80 of 161 uniq…
Snyk security researchers found that 13.4% of 3,984 AI agent skills from ClawHub and skills.sh contain critical security flaws, with 36.82% having at least one security issue, including malware, crede…
The National Institute of Standards and Technology (NIST) announced on April 15, 2026, that the National Vulnerability Database (NVD) will adopt a risk-based triage model, abandoning universal enrichm…
Snyk CEO Ken MacAskill announced layoffs on June 24, 2026, citing the need to move faster in the AI era. The company is reducing team sizes and simplifying its structure to focus on AI security produc…
Evo Security launched Agentic Development Security (ADS) in open preview, introducing a new control point that governs AI agent behavior inside the execution loop. The solution addresses risks emergin…
Evo announced Agentic Development Security (ADS), a new solution designed to secure AI-driven software development by embedding security into workflows to provide visibility, governance, and control o…
Snyk analyzed nearly 10,000 developer environments and found that 43% run multiple AI coding tools, 50.8% have at least one MCP server installed, and 1 in 7 of those had security findings. The researc…