Resources

Understanding Toxic Flows in MCP and the Hidden Risk of AI-Native Systems

A deep dive into toxic flows in MCP and how AI agents can unintentionally create attack paths across tools, data, and systems.

Who’s Really in Control? Governing the Invisible Hands of AI | Snyk

Orchestrate, Govern, and Report: Maturing AppSec in the Age of AI with Snyk

Invisible Threats: Mapping the Hidden Attack Surface of AI-Native Apps

The Dissemination of the Term Vibe Coding

Vibe coding accelerates development but risks security. Learn how Andrej Karpathy's viral term describes Al-driven, minimal-oversight coding, and why it leads to XSS, SQL injection, and data leaks. Read the security implications and best practices.

NPM Security Best Practices: How to Protect Your Packages After the 2025 Shai Hulud Attack

Harden your npm environment against supply chain attacks like Shai-Hulud. Learn 12 essential best practices for developers and maintainers, covering post-install scripts, 2FA, provenance, and deterministic installs.

Why AI-Native Apps Break Traditional AppSec Models

AI-native apps break traditional AppSec. Learn why dynamic models, agents, and model-layer risks demand a modern, AI-aligned security approach.

The Secure Path to AI-Powered Development: O'Reilly Report

Implement the governance and tooling necessary to innovate responsibly and securely in the age of autonomous code.

Can GPT-5.1 Codex Max Build a SECURE Note taking App?

Fix Vulnerabilities Faster: The power of AI-Driven SAST and DAST Correlation

Detecting & Patching Vulnerabilities with Continue and Snyk MCP

Integrate security directly into your AI coding workflow. Learn how to use the open-source Continue AI coding assistant with Snyk Studio's Model Context Protocol (MCP) to automatically detect, fix, and verify high-severity vulnerabilities like SQL Injection, all without leaving your IDE.

6 Key Components of a Robust AI Compliance Strategy

Ensure safe AI adoption and development with a robust AI compliance strategy. Explore the key components and how to prepare for evolving regulations here.

This NEW Model is FAST! (Windsurf SWE-1.5)

AI Threat Hunting: Transforming Cybersecurity Through Intelligent Automation

Discover how AI-driven threat hunting transforms cybersecurity by detecting hidden threats, automating analysis, and strengthening defense strategies against evolving cyberattacks.

Personalization in Vibe Coding

The rise of vibe coding and personalized AI agents is transforming development, but the 'Vibe Coding Hangover' introduces critical security and maintainability risks. Discover how to move from unreviewed, risky code to responsible, secure AI-assisted development.

The New Era of AppSec: Is DAST to SAST Correlation Finally Possible?

The Total Economic Impact™ of Snyk | Snyk Customers Achieved 288% ROI

Cursor 2.0 Composer Model in Action

Closing the Gaps: How to Secure APIs Across the Development Lifecycle

How Snyk Supports Your Compliance Journey: 5 Steps to Operationalize AppSec

AI Code Guardrails: A Practical Guide for Secure Rollout with Windsurf

How I Use Codex Efficiently (OpenAI) PART 2

How I Use Codex Efficiently (OpenAI)

What Is Threat Modeling and Why Is It Essential for DevSecOps?

Learn how continuous threat modeling strengthens DevSecOps by identifying, prioritizing, and mitigating risks across evolving code, data, and pipelines.