Articles

Between You and the Data: Defending Against Man-in-the-Middle Attacks

Learn how Man in the Middle (MITM) attacks work, how to detect them, and how to prevent interception risks across your code, infrastructure, and apps.

5 Benefits of Using SAST and DAST Together

Discover why combining SAST and DAST is essential for comprehensive application security, from early code analysis to runtime validation. By integrating both methodologies, teams can reduce false positives, lower remediation costs, and automate security within CI/CD pipelines. Learn how to bridge the gap between development and security to build faster and more securely.

Inside the 'clawdhub' Malicious Campaign: AI Agent Skills Drop Reverse Shells on OpenClaw Marketplace

Snyk security researchers have uncovered the clawdhub malicious campaign targeting the ClawHub AI marketplace with Trojanized skills that drop reverse shells. This sophisticated attack uses social engineering and obfuscated scripts to compromise hosts via AI agent capabilities on Windows and macOS. Learn how to identify these threats and secure your AI supply chain against evolving agentic workflow risks.

5 Tips for Agentic Coding with Gemini CLI

Unlock secure agentic coding with Gemini CLI. Learn five tips, including using GEMINI.md for project context, integrating Snyk for security scans, and leveraging custom commands to automate your workflow.

Secure Software Development Lifecycle (SSDLC)

Learn more about Secure Software Development Lifecycle (SSDLC), and how to integrate security at every stage of the SDLC to enhance software integrity and protect against vulnerabilities.

Understanding SOC 2 Audits: Checklist & Process

A SOC 2 audit can give your organization a competitive advantage. But what does the audit entail? Here’s A 4-step SOC 2 Audit checklist.

Software Supply Chain Security

Learn more about software supply chain security, why it’s important to organizations, and how you can secure your supply chains with Snyk.

Unlocking Digital Health: Mastering Asset Discovery in Healthtech

Explore the vital role of asset discovery in safeguarding Healthtech, ensuring robust security and compliance.

10 MCP Servers for Entrepreneurs Using AI

Uncover ten MCP servers specifically built to support entrepreneurial functions, covering everything from e-commerce and payments to project management and customer communications.

Decoding SQL Injection: Strategies for Secure Web Applications

Explore the intricacies of SQL Injection: learn its workings, impacts, and robust strategies to shield your web applications from this threat.

Modern Technology Environments Demand Modern Application Security Testing

Legacy security testing tools fail to protect modern applications. Learn the hallmarks of a modern, developer-first DAST solution built for today's complex CI/CD pipelines and APIs.

Ensuring Safe and Reliable AI Interactions with LLM Guardrails

Explore LLM guardrails, why they matter, and how you can effectively implement them to ensure safe and trustworthy AI interactions.

AWS AI Security: How to Identify, Prevent & Mitigate AI-Specific Risks

Learn how to secure AI workloads on AWS by identifying, addressing & mitigating model risks, data leakage, prompt injection, and compliance across the full AI lifecycle.

Five Ways Shadow AI Threatens Your Organization

Uncover 5 ways Shadow AI threatens your organization's data, compliance, and security. Learn how to gain control and protect your business from hidden AI risks.

Slopsquatting: New AI Hallucination Threats and Mitigation Strategies

Discover how slopsquatting is emerging as a serious AI hallucination threat and learn practical mitigation strategies to protect your content and ensure AI accuracy with Snyk.

What If Everybody Can Code?

AI empowers citizen developers to code, posing new security & Shadow IT challenges. Explore how organizations can securely support widespread coding in this evolving landscape.

How to Add a New MCP Server to VS Code

Unlock the power of AI in VS Code! Learn how to integrate MCP Servers, like GitHub's, to extend GitHub Copilot's capabilities with custom tools. This guide covers setup, configuration with .vscode/mcp.json, and using agent mode for enhanced developer workflows.

The Evolution of Pervasive AI for AppSec: Risks & Benefits

Pervasive AI represents a fundamental shift from centralized, cloud-dependent AI systems. What are the implications of Pervasive AI for Developer & Code Security?

Navigating the Challenges of GenAI Adoption for Modern AppSec Teams

With an increase in GenAI adoption, AppSec teams face challenges. Learn what challenges AppSec teams are facing and how they can address risks with Snyk.

Unified Security: Protecting Applications with SAST and DAST

Discover how combining SAST and DAST provides full application security, bridging gaps in visibility and ensuring protection from code to runtime vulnerabilities.