Explore all blogs

PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): [Updated for CVE-2026-115560]

Turn Your Vulnerability Backlog Into Pull Requests With Agentic Remediation

AI Model Risk Depends on What the Model Can Reach

AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered

VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?

Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development

Frontier models found the vulnerabilities. Only the attacker found the chains.

Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed.

Why AI Coding Agents Keep Writing Broken Access Control

What Is Agentic AppSec?

Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control

Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

So I asked my agent instead…

The AI Hurricane Is Here

Is prevention essentially a solved problem?

Why Your AI Application Is Exposed (Even When Your Scans Come Back Clean)

Remediation Agents, Demystified: Why Fixing Beats Finding

Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%

The Agent Baseline: 35 Controls, but Where Should You Start?

Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS

Continuous Offensive Security & AI Pentesting: 20 FAQs

Stop The Sprawl Snyk Secrets Now Generally Available

Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense