Articles

LLM Weaponized via Prompt Injection to Generate SQL Injection Payloads

Think your AI financial assistant is harmless? Learn how LLMs can be tricked via prompt injection to generate SQL injection payloads, weaponizing your application. Discover how insecure coding practices expose you and how Snyk can help detect and fix these dangerous vulnerabilities.

OWASP Top 10 Code Vulnerabilities and How SAST Can Stop Them

Discover the OWASP Top 10 vulnerabilities and how SAST tools like Snyk Code empower developers to detect and fix them early in the development lifecycle.

How does Snyk DCAIF Work under the hood?

Read our technical deep-dive into how Snyk's DCAIF works. To start, with Snyk's Deep Code AI Fix, simply register for a Snyk account here, enable Snyk Agent Fix in your Snyk settings, and start reliably auto-fixing vulnerabilities in seconds.

Vibe Coding a Node.js File Upload API Results in Security Vulnerability

Explore the productivity promises of AI code generation using ChatGPT to build a Node.js file upload API. As security vulnerabilities easily slip in, Snyk can help developers, regardless of their background, catch and fix these risks, ensuring secure application delivery.

The Rise of Agentic AI and What It Means for Us

Agentic AI is an innovative technology that can make decisions and take action on its own to get things done. But what is the impact of Agentic AI on cybersecurity?

The Importance of Code Quality

Code quality is crucial for building high-quality, secure applications. Learn more about code quality, secure development, and Snyk’s code checker.

How to perform static code analysis

Top tips and workflows to help you get started with static analysis to find and fix vulnerabilities in your applications.

Demystifying Traditional (Symbolic) AI

If deep learning is instinct, Symbolic AI is wisdom. Uncover the power of traditional, rule-based AI, why its explainability is critical for security , and how it creates powerful hybrid systems when combined with machine learning.

How to build Node.js MCP Servers that Expose Data Resources to LLMs

MCPs are famous for exposing Tools that augment Large Language Models (LLMs) with the ability to perform actions and invoke generic functions that MCP Servers can implement, but exposing data resources to LLMs is just as important. In this article, we're building an MCP Server in JavaScript to run with a Node.js runtime and define Resources as part of the MCP Server data points.

The evolving role of the modern CISO

Explore the evolving role and responsibilities of the modern CISO. Learn about growth and responsibilities.

8 AI MCP Servers Speeding Up Content Creator Workflows

Discover 8 powerful MCP servers that revolutionize content creation workflows. From video generation to SEO optimization, these AI-powered tools streamline production, boost creativity, and unlock new possibilities for creators.

10 MCP Servers for Entrepreneurs Using AI

Uncover ten MCP servers specifically built to support entrepreneurial functions, covering everything from e-commerce and payments to project management and customer communications.

What You Need to Know About Agent2Agent Protocol

Discover how Google's new Agent2Agent protocol is set to solve AI interoperability and how it enables AI agents to collaborate across enterprise environments, breaking down silos, reducing vendor lock-in, and accelerating automation.

Understanding the AI Bill of Rights: U.S. Framework for Ethical AI | Principles, Compliance, and Key Takeaways

Learn what the AI Bill of Rights is, why it matters, and how to align with its five core principles to build safer, fairer, and more accountable AI.

AI Security Guardrails with Snyk CLI MCP Server

Secure AI-generated code. Snyk CLI MCP Server integrates security into AI coding assistants via MCP for real-time scanning. Keep GenAI speed, add Snyk safety.

StarChat

Discover StarChat, a uniquely tailored internal AI assistant designed to streamline the process of writing StarLang code.

From Vision to Trust: How to Launch an AI Governance Program

Unlock safe AI innovation! Learn how Snyk built its AI governance program from vision to execution, ensuring trust, managing risk, and empowering teams to build securely and responsibly.

Visão geral do DevSecOps

DevSecOps é a integração de práticas de segurança a um modelo de fornecimento de software de DevOps. Sua base é uma cultura em que o desenvolvimento e as operações são executados com processos e ferramentas que promovem a divisão de responsabilidade na criação segura de software.

5 Best Practices for Building MCP Servers

Building MCP Servers has become a mainstream gateway to externalize product capabilities to AI applications and AI-driven workflows. Here are 5 best practices for building MCP Servers.

Understanding Prompt Injection: Techniques, Challenges, and Risks

A prompt injection attack is a GenAI security threat where an attacker deliberately crafts and inputs deceptive text into a large language model (LLM) to manipulate its outputs.