# snyk-learn An interactive developer security training platform from Snyk that teaches secure development through lessons on vulnerabilities across programming languages and ecosystems. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## lightning PyPI Compromise: A Bun-Based Credential Stealer in Python DevFeed: [lightning PyPI Compromise: A Bun-Based Credential Stealer in Python]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-04-30T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Malware](), [Python](), [Bun](), [JavaScript](), [GitHub](), [snyk-learn](), [npm](), [releases]() Tags: [article](), [awareness](), [ci-cd](), [code](), [developer](), [devops](), [github](), [javascript](), [open-source-security](), [payload](), [python](), [release](), [sbom](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [snyk-security-intel](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview A compromised lightning PyPI release downloads the Bun JavaScript runtime at import time and executes an approximately 11 MB obfuscated credential stealer. The article covers the package compromise, Snyk advisory, remediation, and similarities to the preceding Mini Shai-Hulud npm campaign. ### Source excerpt A malicious release of the lightning PyPI package ships a credential-stealing Bun payload that runs on import. Snyk has a live advisory. Here's what's in the package, what to rotate, and how the payload pattern connects to the Mini Shai-Hulud npm campaign one day earlier. ## Anthem Awards 2025: Snyk Learn Recognized for Commitment to Secure AI Development DevFeed: [Anthem Awards 2025: Snyk Learn Recognized for Commitment to Secure AI Development]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-11-19T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [snyk](), [Security](), [Vulnerabilities](), [AI Development](), [Learning](), [Development]() Tags: [2025](), [ai](), [ai-development](), [awards](), [awareness](), [blog](), [developer](), [education](), [security](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview Snyk Learn was recognized as a Silver Winner in the Responsible Technology: Education or Literacy Platform category at the 2025 Anthem Awards. The free platform helps developers understand, identify, and fix code vulnerabilities through bite-sized lessons, interactive examples, and real-world scenarios, including guidance for secure AI development. ### Source excerpt We are incredibly proud and excited to announce that Snyk Learn has been recognized as a Silver Winner in the Responsible Technology: Education or Literacy Platform category at the 5th annual Anthem Awards! ## How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements DevFeed: [How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements]() Original publisher: [Read original article]() Author: Michael Biocchi; Celia Jenkins Published: 2025-09-23T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Security](), [Vulnerabilities](), [Testing](), [Software Engineering]() Tags: [awareness](), [blog](), [compliance](), [developer](), [developers](), [pci-dss](), [pci-dss-v4-0](), [pmm](), [reviews](), [security](), [snyk-learn](), [testing](), [training](), [vulnerabilities]() ### AI overview The article explains how Snyk Learn supports PCI DSS v4.0.1 developer training requirements. It describes relevant, just-in-time security lessons linked to coding mistakes, along with training on secure coding, security testing, code reviews, and software vulnerabilities. ### Source excerpt Discover how Snyk Learn helps organizations meet PCI DSS v4.0 developer training requirements by providing relevant, just-in-time, interactive, and trackable security education for developers. ## The Future of Developer Upskilling Is Human-Led, AI-Supported DevFeed: [The Future of Developer Upskilling Is Human-Led, AI-Supported]() Original publisher: [Read original article]() Author: Kate Powers Burke; Michael Biocchi Published: 2025-06-04T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Generative AI](), [snyk-learn](), [Security](), [Vulnerabilities](), [Large Language Model](), [ide](), [Pull Request](), [Development]() Tags: [2025](), [ai](), [blog](), [code-security](), [developer](), [development](), [devops](), [devsecops](), [ide](), [interest](), [llms](), [pull-request](), [security](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview This article explains how generative AI is accelerating software development while increasing developers' responsibility for reviewing, understanding, and securing AI-generated code. It presents Snyk Assist and Snyk Learn as contextual, in-workflow resources that provide security guidance during IDE work, pull-request reviews, and vulnerability analysis. ### Source excerpt The Future of Developer Upskilling Is Human-Led, AI-Supported | Snyk Assist for Developers. ## Scaling Security Education with Snyk's New Learn Add-on DevFeed: [Scaling Security Education with Snyk's New Learn Add-on]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-05-29T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Application Security](), [sdlc](), [Artificial Intelligence](), [Vulnerabilities]() Tags: [ai](), [awareness](), [blog](), [compliance](), [customer](), [developers](), [education](), [ide](), [learn](), [learning](), [pmm](), [sdlc](), [security](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview Snyk introduces the generally available Snyk Learning Management Add-on alongside Snyk Assist. The offering helps security and development teams scale developer education, reduce application risk, embed secure development knowledge earlier in the SDLC, and support compliance requirements. It provides bite-sized lessons, learning paths, progress tracking, and education on vulnerabilities, OWASP topics, GenAI and LLM risks, and open source risks through Snyk's development workflow. ### Source excerpt Empower developers with Snyk Learn and the new Learning Management Add-on. Build AI-enabled apps securely, reduce risk, and meet compliance with bite-sized lessons and AI-powered assistance. ## Snyk Learn in the Exosphere: Securing Space at HackSpaceCon DevFeed: [Snyk Learn in the Exosphere: Securing Space at HackSpaceCon]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-05-23T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Cybersecurity](), [Security](), [Learning](), [Programming]() Tags: [blog](), [customer](), [cybersecurity](), [developer](), [education](), [interest](), [security](), [snyk-learn](), [training]() ### AI overview The article reports on HackSpaceCon 2025 and argues that cybersecurity must become a core part of computer science and software engineering education. It presents practical, hands-on training, including Snyk Learn, as a way to bridge the security knowledge gap between academia and industry, with examples relevant to space applications. ### Source excerpt Discover the critical need for cybersecurity in space and how Snyk Learn bridges the security knowledge gap between academia and industry. ## Learn About Open Source Security Risks With the New Snyk Learn Learning Path DevFeed: [Learn About Open Source Security Risks With the New Snyk Learn Learning Path]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-05-05T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [open-source-security](), [Open Source](), [Security](), [supply-chain-security](), [Vulnerabilities](), [Learning]() Tags: [awareness](), [blog](), [contribute](), [dependencies](), [developer](), [education](), [executive](), [open-source-security](), [open-source-software](), [security](), [snyk-learn](), [software-supply-chain]() ### AI overview Snyk Learn introduces a free learning path covering the OWASP Top 10 risks for open source software. It explains vulnerabilities affecting open source projects and provides guidance, examples, and mitigation strategies for developers and security professionals. ### Source excerpt Check out the new learning path that covers the OWASP Top 10 risks for open source software. ## Learn about API security risks with the new Snyk Learn Learning Path DevFeed: [Learn about API security risks with the new Snyk Learn Learning Path]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2025-03-06T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [API](), [Application Security](), [Security](), [Learning]() Tags: [api-security](), [application-security](), [blog](), [community](), [compliance](), [developer](), [education](), [security](), [snyk-learn](), [vulnerabilities]() ### AI overview Snyk Learn has introduced a free interactive learning path covering the OWASP Top 10 for API security risks. It helps developers, security teams, and IT professionals understand API threats and apply practical defensive strategies. ### Source excerpt Snyk Learn, our developer security education platform, now includes lessons on API security! Check out the new learning path that covers the OWASP Top 10 for API security risks. ## A commitment to future generations: Snyk's 2024 Student Edition Capture The Flag Recap DevFeed: [A commitment to future generations: Snyk's 2024 Student Edition Capture The Flag Recap]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-11-21T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [ctf](), [Cybersecurity](), [Application Security](), [snyk-learn](), [Vulnerabilities](), [DevSecOps]() Tags: [2025](), [application-security](), [awareness](), [blog](), [contentlab](), [ctf](), [cybersecurity](), [developer](), [devsecops](), [free](), [learn](), [snyk](), [snyk-learn](), [training](), [vulnerabilities]() ### AI overview Snyk recaps its 2024 student Capture The Flag 101 Workshop, which brought together students from more than 100 schools for hands-on cybersecurity training. The article describes CTFs as practical exercises covering application security, network vulnerabilities, cryptography, and related skills, and outlines Snyk Learn's commitment to providing free training and additional student opportunities in 2025. ### Source excerpt Looking to boost your cybersecurity skills? Snyk's CTF 101 Workshop offers a hands-on introduction to Capture the Flag competitions, empowering students to tackle real-world security challenges. Learn about application security, network vulnerabilities, and more through free, engaging training. ## Women - Kickstart your Application Security Career! DevFeed: [Women - Kickstart your Application Security Career!]() Original publisher: [Read original article]() Author: Vandana Verma Sehgal Published: 2024-10-22T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [snyk-learn](), [Cybersecurity](), [Vulnerabilities](), [web applications](), [Threat Research](), [Learning]() Tags: [application-security](), [blog](), [cybersecurity](), [developers](), [devrel](), [free](), [hacking](), [how-to](), [interest](), [learn](), [learning](), [resources](), [snyk-learn](), [vulnerabilities](), [web]() ### AI overview This article explains how to start a career in application security by learning cybersecurity fundamentals and using free, hands-on resources. It highlights Snyk Learn, OWASP, PortSwigger Web Security Academy, TryHackMe, and Hack The Box, with practice covering vulnerabilities such as SQL injection and cross-site scripting. ### Source excerpt Discover how to break into the exciting field of application security. Learn about free online resources, community involvement, mentorship opportunities, and exclusive communities for women in cybersecurity. Get inspired by industry leaders and start your journey today. ## Snyk announces commitment to Service for America, bringing security education access to all DevFeed: [Snyk announces commitment to Service for America, bringing security education access to all]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-10-17T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-learn](), [Cybersecurity](), [Learning](), [AdventureX 2026]() Tags: [application-security](), [awareness](), [blog](), [capture](), [code-security](), [ctf](), [cybersecurity](), [developer](), [devops](), [devsecops](), [education](), [executive](), [free](), [government](), [learn](), [open-source-security](), [pmm](), [security](), [snyk](), [snyk-code](), [snyk-learn](), [snyk-open-source](), [teams](), [training](), [workshops]() ### AI overview Snyk announces its commitment to the Service for America Initiative by providing free cybersecurity education through Snyk Learn. The platform offers interactive lessons, learning paths, resources, and a Capture the Flag 101 workshop for students to help developers, security teams, and aspiring professionals build practical skills for secure software development. ### Source excerpt Snyk partners with the Service for America Initiative to offer free cybersecurity education through Snyk Learn. Discover Snyk Learn's free, hands-on training and workshops designed to equip developers and security teams with the skills to build secure applications. From coding security to Capture the Flag events, Snyk helps prepare students and professionals for the ever-evolving cyber landscape. ## Dive into AI and LLM learning with the new Snyk Learn learning path DevFeed: [Dive into AI and LLM learning with the new Snyk Learn learning path]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-09-18T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [LLM security](), [ai security](), [Vulnerabilities](), [prompt injection](), [genai]() Tags: [ai](), [ai-security](), [awareness](), [blog](), [developer](), [devops](), [devrel](), [devsecops](), [engineering](), [free](), [llm-security](), [prompt-injection](), [secrel](), [security](), [snyk-learn](), [vulnerabilities]() ### AI overview Snyk Learn introduces a free learning path covering the OWASP Top 10 for LLMs and generative AI. It teaches developers and security professionals about risks such as prompt injection and sensitive information disclosure in AI-driven applications. ### Source excerpt Dive into the world of AI and LLM security with Snyk Learn's new free learning path. Learn how to protect your AI systems from the OWASP Top 10 vulnerabilities. Master prompt injection, sensitive data disclosure, and more. Start your AI security journey today! ## Integrating the Snyk Language Server with IntelliJ IDEs DevFeed: [Integrating the Snyk Language Server with IntelliJ IDEs]() Original publisher: [Read original article]() Author: Arvyd Paeglit Published: 2024-06-17T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [IntelliJ IDEA](), [Security](), [snyk-learn](), [Vulnerabilities](), [Protocol (disambiguation)](), [Deep learning](), [Large Language Model](), [Open Source]() Tags: [application-security](), [awareness](), [blog](), [deep-learning](), [developer](), [engineering](), [enterprise](), [ide](), [integration](), [intellij](), [large-language-model](), [ls](), [security](), [snyk](), [snyk-learn](), [user-experience](), [vulnerability](), [workflows]() ### AI overview Snyk announces that its Language Server can be integrated with IntelliJ IDEs. The integration reduces code duplication, supports automatic scanning after startup and file saves, connects vulnerability findings to Snyk Learn lessons, and offers early-access automatic vulnerability fixes for eligible Enterprise plans. ### Source excerpt We're excited to announce that the Snyk Language Server (LS for short) can now be integrated with your existing IntelliJ IDEs. ## Snyk Learn and the NIST Cybersecurity Framework (CSF) DevFeed: [Snyk Learn and the NIST Cybersecurity Framework (CSF)]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-03-06T14:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Cybersecurity](), [Application Security](), [Development](), [Vulnerabilities](), [sdlc](), [Cryptography]() Tags: [application-security](), [awareness](), [blog](), [cybersecurity](), [developer](), [development](), [education](), [engineering](), [nist](), [sdlc](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview The article explains how Snyk Learn supports the Protect function of NIST Cybersecurity Framework 2.0 through developer-focused cybersecurity training. It covers topics including SQL injection, cryptography, server-side request forgery, and memory leaks, with the goal of helping developers build security into applications earlier in the SDLC and reduce production risk. ### Source excerpt Find out how Snyk Learn helps development teams with the "Protect" function of NIST CSF 2.0.