# snyk Published articles for snyk. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work DevFeed: [Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2025-12-16T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Securing AI](), [Security](), [Application Security](), [Orchestration](), [prompt injection](), [Large Language Model](), [Retrieval Augmented Generation (RAG)](), [Machine Learning, Security Attacks]() Tags: [agentic-security](), [ai](), [ai-security](), [awareness](), [blog](), [developer](), [orchestration](), [prompt-injection](), [rag](), [security](), [snyk](), [snyk-platform](), [vulnerabilities]() ### AI overview The article argues that traditional application-security processes cannot keep pace with AI-native applications, including copilots, RAG systems, autonomous agents, and AI-powered workflows. It presents Evo by Snyk as an agentic, orchestrated approach intended to address risks such as prompt injection, data poisoning, model inversion, hallucinations, and supply-chain vulnerabilities. ### Source excerpt The rise of GenAI brings complex, non-deterministic security risks that traditional methods can't handle. Discover Evo by Snyk, the world's first agentic security orchestration system for AI-native defense. ## Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner DevFeed: [Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner]() Original publisher: [Read original article]() Author: Sarah Conway Published: 2025-12-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Amazon Web Services](), [AI Strategy](), [Security](), [Architecture & Design](), [Artificial Intelligence]() Tags: [ai](), [ai-ml](), [amazon](), [awareness](), [aws](), [blog](), [co-created](), [executive](), [generative-ai](), [partner](), [responsible-ai](), [security](), [snyk](), [snyk-platform]() ### AI overview Snyk joins AWS as a launch partner in the invite-only AWS Pattern Partners program, contributing experience with AI/ML and Generative/Agentic AI through the Snyk AI Trust platform. The program develops repeatable, scalable patterns with validated architecture, controls, and delivery practices to help enterprises modernize processes and adopt AI safely. Snyk is co-developing the Snyk Studio pattern to address disconnected data and workflows, enterprise-scale governance, AI-generated security risks, and evolving regulatory and compliance requirements. ### Source excerpt Snyk joins the AWS Pattern Partners program, bringing its proven success with AI/ML and Generative AI. Discover how Snyk Studio accelerates innovation on AWS, embeds security at inception, and delivers measurable outcomes for enterprises modernizing critical processes and adopting AI safely. ## SHA1-Hulud, npm supply chain incident DevFeed: [SHA1-Hulud, npm supply chain incident]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2025-11-24T18:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [npm](), [snyk](), [vulnerability](), [GitHub Actions](), [CI/CD](), [GitHub](), [Self-hosted](), [Cloud](), [Amazon Web Services](), [Azure](), [Google Cloud Platform (GCP)]() Tags: [awareness](), [blog](), [ci](), [ci-cd](), [cloud](), [cloud-infrastructure](), [developer](), [devrel](), [github](), [github-actions](), [incident](), [npm](), [security](), [self-hosted](), [sha1-hulud](), [shai-hulud](), [snyk](), [supply-chain](), [supply-chain-security](), [trust](), [vulnerability](), [vulnerability-insights](), [worm]() ### AI overview Snyk reports SHA1-Hulud, a second-wave npm supply chain attack and worm that spreads through trojanized packages with hidden preinstall scripts. The worm can compromise GitHub Actions self-hosted runners, inject malicious workflows, execute remote commands, exfiltrate GitHub and npm secrets, and search for AWS, Azure, and GCP credentials. Snyk identified more than 600 impacted npm packages and is retesting customer assets, notifying affected customers, and updating its vulnerability databases. ### Source excerpt Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud. We believe this is a second wave of the Shai-Hulud attack. Learn what this attack is and how Snyk is responding. ## Anthem Awards 2025: Snyk Learn Recognized for Commitment to Secure AI Development DevFeed: [Anthem Awards 2025: Snyk Learn Recognized for Commitment to Secure AI Development]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-11-19T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [snyk](), [Security](), [Vulnerabilities](), [AI Development](), [Learning](), [Development]() Tags: [2025](), [ai](), [ai-development](), [awards](), [awareness](), [blog](), [developer](), [education](), [security](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview Snyk Learn was recognized as a Silver Winner in the Responsible Technology: Education or Literacy Platform category at the 2025 Anthem Awards. The free platform helps developers understand, identify, and fix code vulnerabilities through bite-sized lessons, interactive examples, and real-world scenarios, including guidance for secure AI development. ### Source excerpt We are incredibly proud and excited to announce that Snyk Learn has been recognized as a Silver Winner in the Responsible Technology: Education or Literacy Platform category at the 5th annual Anthem Awards! ## Secure by Design: The Future of Threat Modeling for AI-Native Applications DevFeed: [Secure by Design: The Future of Threat Modeling for AI-Native Applications]() Original publisher: [Read original article]() Author: John Carione Published: 2025-11-11T05:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Security for AI](), [Architecture & Design](), [Artificial Intelligence](), [snyk](), [Vulnerabilities](), [prompt injection]() Tags: [agentic](), [ai](), [prompt-injection](), [secure-by-design](), [security](), [security-for-ai](), [snyk]() ### AI overview This Snyk article argues that traditional, manual threat modeling cannot keep pace with AI-native applications built from large language models, autonomous agents, APIs, and changing data flows. It presents continuous, automated, AI-assisted threat modeling as a way to maintain secure-by-design systems and address risks such as prompt injection, data exfiltration, data poisoning, and agentic vulnerabilities. ### Source excerpt Explore how Snyk's Evo Threat Modeling Agent automates and contextualizes security for AI-native applications, addressing prompt injection, data exfiltration, data poisoning, and agentic vulnerabilities. ## Snyk Studio brings security scanning and automated fixes to Factory's Droids DevFeed: [Snyk Studio brings security scanning and automated fixes to Factory's Droids]() Original publisher: [Read original article]() Author: Sarah Conway Published: 2025-11-05T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [Security](), [AI Development](), [Vulnerabilities](), [Model Context Protocol]() Tags: [2025](), [agentic](), [agentic-security](), [ai](), [awareness](), [blog](), [code-security](), [developer](), [model-context-protocol](), [partnership](), [related-content](), [security](), [snyk](), [vulnerabilities]() ### AI overview Snyk announces a partnership with Factory to bring Snyk Studio's real-time security intelligence into Factory Droid workflows through the Model Context Protocol. The integration is designed to help Droids identify and remediate vulnerabilities in newly generated code and reduce existing security debt using prioritized vulnerability data. ### Source excerpt Snyk is thrilled to announce our partnership with Factory, which brings Snyk Studio directly into Droid workflows. ## Snyk Studio: Now for All Customers, Powering Secure AI Development at Scale DevFeed: [Snyk Studio: Now for All Customers, Powering Secure AI Development at Scale]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2025-11-04T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [AI Development](), [Securing AI](), [Security](), [VS Code Extension](), [MCP Server](), [code productivity](), [FIRST]() Tags: [2025](), [ai](), [ai-coding](), [ai-development](), [ai-security](), [availability](), [awareness](), [blog](), [code](), [code-security](), [developer](), [development](), [devops](), [engineering](), [enterprise](), [extension](), [guides](), [integration](), [mcp](), [mcp-server](), [pmm](), [security](), [shift-left](), [snyk](), [speed](), [tool](), [vs-code]() ### AI overview Snyk Studio is now available to all customers as a product for securing the AI-driven development lifecycle. The announcement introduces streamlined setup through the official Snyk VS Code extension, enterprise-wide deployment, and general availability of the Snyk MCP Server integration engine. ### Source excerpt Snyk Studio now offers secure AI development at scale for all customers, with streamlined setup via VS Code extension and enterprise rollout capabilities. ## DevSecCon 2025 Recap: Securing the AI Revolution Together DevFeed: [DevSecCon 2025 Recap: Securing the AI Revolution Together]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-10-22T23:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [DevSecOps](), [snyk](), [Application Security](), [Security](), [ide](), [Pull Request](), [snyk-code](), [Development]() Tags: [2025](), [ai](), [also](), [blog](), [developer](), [devops](), [devsecops](), [ide](), [interest](), [pmm](), [secure-software](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [snyk-platform]() ### AI overview This DevSecCon 2025 recap examines how AI is changing software development and security. It covers AI-accelerated DevSecOps, securing code from the first prompt, and managing AI-native application chaos with Evo by Snyk. The article also highlights Snyk capabilities for IDEs, pull requests, Snyk Code, and AppSec governance. ### Source excerpt AI is changing development. Our DevSecCon 2025 recap covers the 3 critical stages: AI-Accelerated DevSecOps, securing code at the first prompt, and taming AI-native app chaos with Evo by Snyk. ## Why We Built Evo -- From My Heart DevFeed: [Why We Built Evo -- From My Heart]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2025-10-22T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Securing AI](), [ai security](), [Application Security](), [Cybersecurity](), [snyk](), [Artificial Intelligence](), [Architecture & Design]() Tags: [acquisition](), [agentic-ai](), [agentic-security](), [ai](), [ai-security](), [awareness](), [blog](), [cybersecurity](), [developer](), [llm](), [mcp](), [security](), [snyk](), [snyk-platform]() ### AI overview Snyk introduces Evo as an agentic security orchestrator for AI-native software systems. The article argues that AI security must be an autonomous, operational, continuous architecture integrated into development rather than a passive collection of scanners, policies, or dashboards. ### Source excerpt Introducing Evo by Snyk, the world's first Agentic Security Orchestrator. Learn why Evo is changing the game in cybersecurity to make security seamless, invisible, intelligent, and unstoppable--so innovation never has to slow down again. ## Increasing Agility & Flexibility: How Mercato Solutions tackles the application security vs. flexibility conundrum with Snyk DevFeed: [Increasing Agility & Flexibility: How Mercato Solutions tackles the application security vs. flexibility conundrum with Snyk]() Original publisher: [Read original article]() Author: Nina McClure Published: 2025-10-16T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Low code](), [snyk](), [Web](), [Cloud]() Tags: [application-security](), [awareness](), [blog](), [cloud](), [customer](), [devops](), [low-code](), [security](), [snyk](), [snyk-platform](), [web]() ### AI overview This customer article explains how Mercato Solutions, a low-code enterprise application provider, works with Snyk to address application security challenges while preserving the flexibility of its cloud-first platform. The article highlights the security risks of headless infrastructure, the resulting attack surface, and Mercato's goal of maintaining strong security with a small team. ### Source excerpt Learn how Mercato Solutions, a fast-growing low-code application provider, achieved near-zero security incidents and maintained development flexibility by partnering with Snyk API & Web. ## Snyk Named a Leader in the 2025 Gartner® Magic Quadrant™ for Application Security Testing DevFeed: [Snyk Named a Leader in the 2025 Gartner® Magic Quadrant™ for Application Security Testing]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-10-14T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Testing](), [sdlc](), [snyk-platform](), [Artificial Intelligence]() Tags: [ai](), [application-security](), [awareness](), [blog](), [build](), [executive](), [gartner](), [sdlc](), [security](), [snyk](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source](), [testing]() ### AI overview Snyk announces that it was recognized as a Leader in the 2025 Gartner Magic Quadrant for Application Security Testing. The article highlights Snyk's developer-first approach, coverage across the modern SDLC, AI-powered remediation, integrations with developer workflows, and security controls for AI-related risks and untrusted LLM outputs. ### Source excerpt Snyk is recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Application Security Testing (AST), validating our developer-first approach and comprehensive platform for securing the modern SDLC. ## Phishing Campaign Leveraging the NPM Ecosystem DevFeed: [Phishing Campaign Leveraging the NPM Ecosystem]() Original publisher: [Read original article]() Author: Liran Tal Published: 2025-10-09T23:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [npm](), [npm packages](), [browser](), [Malware](), [Open Source]() Tags: [awareness](), [blog](), [browser](), [cdn](), [developer](), [devrel](), [malicious-packages](), [malware](), [npm](), [npm-packages](), [phishing](), [security](), [snyk](), [snyk-platform](), [supply-chain](), [supply-chain-security]() ### AI overview A phishing campaign abuses the npm ecosystem and the unpkg CDN to host and deliver JavaScript through crafted HTML business documents. More than 175 disposable packages redirect victims to credential-harvesting sites when opened in a browser, targeting over 135 organizations. ### Source excerpt A new phishing campaign weaponizes NPM and the unpkg CDN. Over 175 throwaway packages are used to host scripts that redirect users to credential-harvesting sites. The attack targets enterprise employees through the browser, not developers at install time. ## Malicious MCP Server on npm postmark-mcp Harvests Emails DevFeed: [Malicious MCP Server on npm postmark-mcp Harvests Emails]() Original publisher: [Read original article]() Author: Liran Tal Published: 2025-09-25T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [MCP Server](), [supply-chain-security](), [npm](), [incident](), [Security](), [toolchains]() Tags: [agent](), [agents](), [ai](), [awareness](), [backdoor](), [blog](), [devrel](), [incident](), [mcp](), [mcp-server](), [npm](), [open-source-security](), [pii](), [secrets](), [security](), [snyk](), [supply-chain](), [supply-chain-security](), [tokens](), [vulnerability-insights]() ### AI overview This security article reports that the npm package postmark-mcp, an MCP Server for sending email through Postmark, was modified in September 2025 to secretly add a BCC forwarding emails to an external domain. It outlines the incident timeline, the email data and credentials potentially at risk, and mitigation steps including uninstalling the package, rotating credentials, reviewing email logs, and scanning with Snyk's MCP-Scan. ### Source excerpt Urgent security alert: On September 25, 2025, the npm package 'postmark-mcp' was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning with Snyk's MCP-Scan. ## Snyk Named a Leader in the 2025 Forrester SAST Wave: SAST Solutions, Q3 2025 DevFeed: [Snyk Named a Leader in the 2025 Forrester SAST Wave: SAST Solutions, Q3 2025]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-09-09T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [Application Security](), [Testing](), [Securing AI](), [Developer experience](), [Vulnerabilities]() Tags: [2025](), [ai](), [ai-security](), [application-security](), [awareness](), [blog](), [code-security](), [developer-experience](), [executive](), [recognition](), [sast](), [snyk](), [vulnerabilities]() ### AI overview Snyk announces that Forrester recognized it as a Leader in the 2025 Forrester Wave for Static Application Security Testing Solutions. The article attributes this position to Snyk's innovation, AI Security Platform, developer experience, enterprise analytics and visibility, broad Application Security Testing capabilities, and customer impact. It also highlights AI-powered prioritization, autonomous fixes, and the role of Snyk in shift-left security strategies. ### Source excerpt We're excited to announce that Snyk has been recognized as a Leader in the Forrester Wave™: Static Application Security Testing (SAST) Solutions, Q3 2025. ## Prioritize with Snyk's Open Source Vulnerability Experience DevFeed: [Prioritize with Snyk's Open Source Vulnerability Experience]() Original publisher: [Read original article]() Author: Ryan McMorrow Published: 2025-08-20T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Vulnerabilities](), [Library](), [Development](), [Open Source]() Tags: [application-security](), [awareness](), [blog](), [cost](), [dependency](), [developer](), [developers](), [open-source](), [open-source-security](), [open-source-vulnerabilities](), [snyk](), [snyk-open-source](), [snyk-platform]() ### AI overview Snyk introduces a new default vulnerability view that groups open source vulnerabilities by dependency and the versions that fix them. The view helps teams compare upgrades by their remediation impact and cost-benefit tradeoffs, making it easier to prioritize library updates and resolve more issues efficiently. ### Source excerpt Discover Snyk's new default view, grouping vulnerabilities by library and fix versions to help you prioritize and remediate open source vulnerabilities more efficiently. ## Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk DevFeed: [Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk]() Original publisher: [Read original article]() Author: Phoebe Nerdahl Published: 2025-08-07T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [ai security](), [AI Strategy](), [AI Development](), [Security](), [Vulnerabilities](), [AI Platform](), [GitHub](), [Terraform]() Tags: [agentic-ai-security](), [ai](), [ai-adoption](), [ai-infrastructure](), [ai-security](), [awareness](), [blog](), [compliance](), [devops](), [executive](), [github](), [government](), [nist](), [sboms](), [secure-by-design](), [security](), [self-hosted](), [snyk](), [snyk-platform](), [terraform](), [vulnerabilities]() ### AI overview This article explains how Snyk for Government helps federal agencies adopt AI securely through secure-by-design development, continuous vulnerability management, compliance support, automation, and governance. It highlights integrations across developer workflows, FedRAMP authorization, standards-aligned practices, and the Snyk AI Trust Platform. ### Source excerpt Learn how Snyk for Government helps federal agencies meet AI mandates with confidence. Snyk's AI Trust Platform ensures secure-by-design development, compliance, and transparent AI systems. ## Snyk Supercharges API Discovery with New Akamai Integration DevFeed: [Snyk Supercharges API Discovery with New Akamai Integration]() Original publisher: [Read original article]() Author: Nuno Loureiro Published: 2025-08-06T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [API](), [Application Security](), [snyk-platform](), [Security](), [OpenAPI Specification]() Tags: [2025](), [akamai](), [analysis](), [api](), [api-discovery](), [api-security](), [api-testing](), [apis](), [application-security](), [awareness](), [blog](), [co-created](), [efficiency](), [executive](), [integration](), [openapi](), [openapi-specification](), [platform](), [scanner](), [snyk](), [snyk-platform](), [testing](), [web]() ### AI overview Snyk and Akamai announced an integration that automates API discovery and schema ingestion. Akamai API inventories and schemas are added to Snyk API & Web so teams can turn discovered APIs into scannable targets with a single click, improving API security testing coverage and efficiency. ### Source excerpt Snyk and Akamai partner to streamline API security. This integration automates API discovery and schema ingestion from Akamai to power Snyk's DAST engine, boosting scan coverage and efficiency. ## Snyk Joins CISA's Secure by Design Pledge DevFeed: [Snyk Joins CISA's Secure by Design Pledge]() Original publisher: [Read original article]() Author: Brian Campbell Published: 2025-08-05T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security & Privacy](), [MFA](), [cybersecurity and infrastructure security agency](), [passwords](), [Security](), [vulnerability]() Tags: [application-security](), [authentication](), [awareness](), [blog](), [cisa](), [compliance](), [customer](), [cybersecurity](), [devops](), [devsecops](), [executive](), [mfa](), [open-source-security](), [passwords](), [secure-by-design](), [secure-by-design-pledge](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [software](), [supply-chain-security](), [vulnerabilities]() ### AI overview Snyk's CISO describes the company's decision to join CISA's Secure by Design pledge. The article presents the pledge as a set of measurable goals for improving product security, including secure-by-default practices, MFA, eliminating default passwords, and reducing vulnerabilities before software reaches users. ### Source excerpt Snyk's CISO explains why we've joined CISA's Secure by Design pledge. Learn about the 7 key goals for a safer digital world, including MFA, no default passwords, and vulnerability reduction. ## Secure at Inception: Introducing New Tools for Securing AI-Native Development DevFeed: [Secure at Inception: Introducing New Tools for Securing AI-Native Development]() Original publisher: [Read original article]() Author: Daniel Berman; Liran Tal Published: 2025-08-04T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Securing AI](), [Model Context Protocol](), [Artificial Intelligence](), [Vulnerabilities](), [snyk]() Tags: [agentic-security](), [agents](), [ai](), [ai-security](), [application-security](), [awareness](), [blog](), [ci-cd](), [compliance](), [customer](), [developer](), [devrel](), [devsecops](), [mcp](), [mcp-server](), [open-source-security](), [pmm](), [securing-ai](), [security](), [security-vulnerabilities](), [snyk]() ### AI overview Snyk introduces three capabilities at Black Hat 2025 for securing AI-native development: security testing embedded in agentic workflows and tools, AI-BOM visibility and governance, and MCP-scanning capabilities. The article describes emerging risks including prompt injection, model poisoning, and MCP rug pulls. ### Source excerpt Snyk unveils innovations at Black Hat to secure AI development. Features include MCP Server for agentic workflows, AI-BOM for visibility, and Toxic Flow Analysis for novel AI threats. ## Fixing Fix Fatigue: Building Developer Trust for Secure AI Code DevFeed: [Fixing Fix Fatigue: Building Developer Trust for Secure AI Code]() Original publisher: [Read original article]() Author: Ezra Tanzer Published: 2025-06-30T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Securing AI](), [Artificial Intelligence](), [Vulnerabilities](), [ai-coding](), [GitHub Copilot](), [snyk]() Tags: [ai](), [ai-security](), [application-security](), [blog](), [code-security](), [developer](), [devops](), [github-copilot](), [interest](), [productivity](), [security](), [security-vulnerabilities](), [snyk]() ### AI overview This article explains how AI coding assistants increase developer productivity while introducing security risks, including vulnerabilities in AI-generated code. It argues that security tools must build developer confidence through verified fixes, real-time scanning, and workflows that reduce friction and alert fatigue. ### Source excerpt Build developer trust in AI security tools with verified fixes, real-time scanning, and frictionless workflows powered by Snyk Agent Fix. ## Why AI Trust Will Shape Your Next Decade of Software Development DevFeed: [Why AI Trust Will Shape Your Next Decade of Software Development]() Original publisher: [Read original article]() Author: Brendan Hann Published: 2025-06-24T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [AI Development](), [Securing AI](), [snyk](), [Security](), [sdlc](), [Platform Engineering](), [AI Strategy](), [prompt injection](), [Large Language Model]() Tags: [2025](), [agentic](), [ai](), [ai-adoption](), [ai-security](), [ai-transparency](), [automation](), [blog](), [code-security](), [compliance](), [developer](), [development](), [engineering](), [governance](), [interest](), [llm](), [platform-engineering](), [prompt-injection](), [risk-management](), [sdlc](), [security](), [snyk](), [snyk-platform](), [software-development](), [speed](), [trust]() ### AI overview The article argues that AI trust is foundational for safe, scalable software development as organizations adopt AI and agentic workflows. It describes AI trust as maintaining control, visibility, security, governance, and continuous risk management while benefiting from faster delivery, greater productivity, and automation. It highlights risks including insecure AI-generated code, prompt injection, data exfiltration, model manipulation, and misconfiguration, and presents Snyk's AI Security Platform as a way to embed risk management and security into the SDLC. ### Source excerpt Discover why AI Trust is crucial for secure, scalable software development in the AI era. Learn how Snyk's AI Security Platform helps you manage risk, enforce policies, and ensure continuous compliance. ## Building AI Trust with Snyk Code and Snyk Agent Fix DevFeed: [Building AI Trust with Snyk Code and Snyk Agent Fix]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨); Brendan Hann Published: 2025-06-23T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-code](), [ai security](), [Application Security](), [ai-governance](), [Securing AI](), [Pull Request](), [ide]() Tags: [ai](), [ai-coding](), [ai-governance](), [ai-security](), [application-security](), [auto-remediation](), [autonomous](), [blog](), [code-security](), [compliance](), [developer](), [devops](), [engineering](), [pmm](), [pull-requests](), [sast](), [security](), [snyk](), [snyk-code](), [snyk-platform]() ### AI overview Snyk describes its AI Security Platform, Snyk Code, and Snyk Agent Fix for governing AI-assisted development. Snyk Agent Fix autonomously generates and validates code-security fixes, offering auto-remediation in IDEs and pull requests, while Snyk Code provides SAST, visibility, prioritization, and policy controls. ### Source excerpt Secure and accelerate your adoption of AI coding with pre-screened auto-fixes and autonomous code security for modern, developer-loved SAST. ## Announcing a Dedicated Snyk API & Web Infrastructure Instance for Asia-Pacific DevFeed: [Announcing a Dedicated Snyk API & Web Infrastructure Instance for Asia-Pacific]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-06-16T23:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [API](), [Web](), [Application Security](), [Security, Privacy and Abuse Prevention](), [Latency]() Tags: [ai](), [announce](), [apac](), [api](), [application-security](), [awareness](), [blog](), [community](), [compliance](), [data-privacy](), [developer](), [devops](), [executive](), [latency](), [launch](), [sdlc](), [security](), [shift-left](), [snyk](), [web]() ### AI overview Snyk has launched a dedicated Snyk API & Web infrastructure instance hosted locally in the Asia-Pacific region. The instance supports regional data residency and compliance requirements, reduces latency, and provides DAST capabilities for identifying runtime vulnerabilities in the context of AI-driven development. ### Source excerpt Snyk is delighted to announce a significant milestone for our customers and partners in the Asia-Pacific region: the launch of a dedicated Snyk API & Web infrastructure instance, which is now available and hosted locally within the region. ## Snyk for Government Achieves FedRAMP Moderate Authorization: A Milestone for Secure Government Software DevFeed: [Snyk for Government Achieves FedRAMP Moderate Authorization: A Milestone for Secure Government Software]() Original publisher: [Read original article]() Author: Danny Allan Published: 2025-06-05T23:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [Application Security](), [Vulnerabilities]() Tags: [ai](), [application-security](), [awareness](), [blog](), [engineering](), [executive](), [fedramp](), [government](), [security](), [snyk](), [snyk-platform](), [vulnerabilities]() ### AI overview Snyk announced that Snyk for Government has received FedRAMP Moderate authorization for U.S. public-sector use. The company says the offering supports vulnerability detection, remediation guidance, policy enforcement, developer-tool integrations, and compliance reporting. ### Source excerpt Snyk for Government is our FedRAMP Moderate authorized solution for the public sector. This authorization underscores our unwavering commitment to providing secure development solutions that meet the rigorous standards of the Federal Risk and Authorization Management Program (FedRAMP). [Next page]()