# finserv Published articles for finserv. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code DevFeed: [Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code]() Original publisher: [Read original article]() Author: Snyk Team Published: 2026-07-30T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [AI Bots]() Tags: [ai](), [ai-agent](), [application-security](), [article](), [cloud-security](), [code](), [code-security](), [containers](), [developer](), [devops](), [devsecops](), [enablement](), [finserv](), [health-care](), [integration](), [python](), [security](), [snyk-code](), [snyk-container](), [snyk-open-source](), [snyk-platform](), [supply-chain-security](), [vulnerabilities]() ### AI overview Snyk Studio is integrated with Snowflake Cortex Code to scan AI-generated application code, dependencies, and container images for vulnerabilities during development. ### Source excerpt Snyk Studio integrates with Snowflake Cortex Code to scan AI-generated code, dependencies, and containers for vulnerabilities during development. ## The Attacker Never Sleeps, Neither Can Your Testing DevFeed: [The Attacker Never Sleeps, Neither Can Your Testing]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2026-07-30T00:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI-assisted coding](), [Developer Tools]() Tags: [agents](), [ai](), [application-security](), [awareness](), [blog](), [code](), [code-security](), [devops](), [devsecops](), [executive](), [finserv](), [interest](), [open-source-security](), [security](), [snyk-apprisk](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [software](), [supply-chain-security](), [tech](), [testing](), [vulnerability-insights]() ### AI overview AI-driven code generation is expanding software attack surfaces while giving attackers machine-speed reasoning capabilities. The article argues that security teams need continuous testing, agent governance, and independent validation of findings. ### Source excerpt AI is accelerating software development and giving attackers machine-speed capabilities. Security teams must continuously test AI-built code, govern agents, and independently validate every finding. ## Governing Security in the Age of Infinite Signal - From Discovery to Control DevFeed: [Governing Security in the Age of Infinite Signal - From Discovery to Control]() Original publisher: [Read original article]() Author: Randall Degges Published: 2026-04-10T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Securing AI](), [ai security](), [Artificial Intelligence](), [anthropic](), [Vulnerabilities](), [Responsibility & Safety]() Tags: [ai](), [ai-security](), [anthropic](), [application-security](), [article](), [automation](), [autonomous](), [awareness](), [devops](), [devsecops](), [enablement](), [engineering](), [executive](), [finserv](), [interest](), [production](), [security](), [snyk-platform](), [snyk-security-intel](), [supply-chain-security](), [tech](), [vulnerabilities](), [vulnerability-insights]() ### AI overview Anthropic's AI-driven vulnerability discovery systems can uncover software flaws at unprecedented scale, but increased capability also expands risk. The article argues that enterprise security must move from detection to control through deterministic validation, prioritization, remediation automation, and governance. ### Source excerpt AI can find vulnerabilities at scale, but enterprise security now depends on control, validation, and governance that can keep up. ## Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program DevFeed: [Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program]() Original publisher: [Read original article]() Author: Rudy Lai Published: 2026-04-01T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Securing AI](), [Generative AI](), [shadow AI](), [ai security](), [Security](), [Automation]() Tags: [agentic](), [agents](), [ai](), [ai-adoption](), [ai-security](), [application-security](), [aspm](), [automation](), [awareness](), [blog](), [ci-cd](), [compliance](), [customer](), [customer-featured](), [developer](), [devops](), [executive](), [finserv](), [generative](), [generative-ai](), [interest](), [pmm](), [policy](), [retail](), [scale](), [security](), [shadow-ai](), [snyk-apprisk](), [snyk-platform](), [tech]() ### AI overview Snyk shares five lessons from its Evo design partner program for securing generative AI. The article emphasizes discovering AI sprawl and shadow AI, understanding custom AI deployments, replacing static spreadsheets, enforcing governance policies, and using actionable risk intelligence to move AI from chaos to controlled production. ### Source excerpt Learn 5 key lessons from Snyk's Evo design partner program. Discover how AI discovery, risk intelligence, and policy automation help teams secure generative AI and govern AI sprawl at scale. ## Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance DevFeed: [Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-03-20T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security, Privacy and Abuse Prevention](), [DevSecOps](), [vulnerability management](), [Artificial Intelligence](), [Automation](), [threat detection](), [cloud-infrastructure](), [Cybercrime]() Tags: [ai](), [application-security](), [automation](), [blog](), [cloud-infrastructure](), [community](), [compliance](), [customer](), [customer-featured](), [data-privacy](), [devsecops](), [executive](), [financial-services](), [finserv](), [interest](), [pci-dss](), [security](), [soc-2](), [threat-detection](), [vulnerability-management]() ### AI overview This article distills a fireside-chat discussion about application security challenges in financial services, featuring Snyk's Field CTO and CIBC's Senior Director of Security Service Management. It covers the tension between rapid innovation and strict compliance, risks from cybercrime, data privacy, cloud infrastructure, third-party services, legacy systems, and modern applications, and the role of automation, continuous security testing, monitoring, DevSecOps, AI-driven tools, and human oversight in vulnerability management. ### Source excerpt Join Snyk's Field CTO, Steven Schmidt, and Mihai Saveschi, Senior Director of Security Service Management at CIBC, for an exclusive fireside chat on the evolving landscape of application security in financial services. ## Snyk Recognized as Trusted Partner and Innovator by JPMorganChase DevFeed: [Snyk Recognized as Trusted Partner and Innovator by JPMorganChase]() Original publisher: [Read original article]() Author: Ken Mellert Published: 2025-01-14T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security & compliance, Cloud security](), [vulnerability management](), [CI/CD](), [Critical Infrastructure]() Tags: [application-security](), [blog](), [ci-cd](), [cloud](), [critical-infrastructure](), [customer](), [developer](), [executive](), [financial-services](), [finserv](), [innovation](), [interest](), [partner](), [partnership](), [real-time](), [related-content](), [security](), [shift-left](), [snyk](), [supply-chain](), [vulnerabilities](), [vulnerability-management]() ### AI overview Snyk was inducted into JPMorgan Chase's Hall of Innovation for its role as a cybersecurity partner helping modernize application security and protect financial-services infrastructure. The article highlights Snyk's support for secure application development, supply chain risk management, vulnerability management, cloud security, compliance, and CI/CD integration. ### Source excerpt Snyk joined JPMorgan Chase's Hall of Innovation for 2024, celebrating its impact on application security, market disruption, and overall partnership. Learn more about this collaboration. ## 5 reasons why developers at FinServ institutions are outpacing their security teammates DevFeed: [5 reasons why developers at FinServ institutions are outpacing their security teammates]() Original publisher: [Read original article]() Author: Katie DeMatteis Published: 2024-09-09T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [iac-security](), [Vulnerabilities]() Tags: [ai](), [application-security](), [awareness](), [blog](), [ci-cd](), [cloud](), [devops](), [enablement](), [executive](), [finserv](), [iac-security](), [infrastructure-as-code](), [megawatt](), [vulnerabilities]() ### AI overview Financial-services development teams are adopting new technologies and cloud-based infrastructure-as-code quickly, while security teams struggle to adapt older application-security tools and processes to these environments. ### Source excerpt Learn why the development practices at financial services companies are outpacing older security technologies and techniques. ## 3 ways AppSec modernization is a game-changer for financial services DevFeed: [3 ways AppSec modernization is a game-changer for financial services]() Original publisher: [Read original article]() Author: Katie DeMatteis Published: 2024-09-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [software-development](), [supply-chain-security](), [Security]() Tags: [application-security](), [awareness](), [blog](), [development](), [devops](), [executive](), [financial-services](), [finserv](), [fintech](), [interest](), [megawatt](), [modernization](), [secure-software](), [security](), [shift-left](), [software-development](), [supply-chain](), [supply-chain-security]() ### AI overview The article explains why financial services companies need to modernize application security as development becomes faster and more complex. It highlights developer adoption, shift-left security, regulatory compliance, and software supply-chain risks as central concerns. ### Source excerpt Learn why modernizing application security is essential for today's financial services companies. ## A stepping stone towards holistic application risk and compliance management of the Digital Operational Resiliency Act (DORA) DevFeed: [A stepping stone towards holistic application risk and compliance management of the Digital Operational Resiliency Act (DORA)]() Original publisher: [Read original article]() Author: Ben Desjardins; Mathias Conradt Published: 2024-07-11T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Resilience](), [Security](), [Vulnerabilities](), [ai-coding](), [Development](), [Deployment]() Tags: [ai-coding](), [application-security](), [awareness](), [blog](), [compliance](), [deployment](), [development](), [devops](), [digital](), [executive](), [finserv](), [operational](), [pmm](), [resiliency](), [security](), [snyk-platform](), [vulnerabilities]() ### AI overview The article explains how the European Union's Digital Operational Resilience Act (DORA) addresses ICT-related risks and business continuity for financial institutions and critical service providers. It presents application security across the development, deployment, and maintenance lifecycle as foundational to DORA compliance, emphasizing application vulnerabilities, software complexity, rapid development, and unmanaged use of AI coding assistants as sources of operational risk. ### Source excerpt The European Union's Digital Operational Resilience Act (DORA) establishes a comprehensive framework to manage Information and Communication Technology (ICT) related risks and ensure business continuity for financial institutions and critical service providers.