AI Query Builder for SAST: Now Generally Available
When we first introduced AI Query Builder in early 2023, AI-assisted development was just beginning to reshape how teams wrote code. Fast forward to 2026, and the landscape has completely transformed. Today, developers don’t just use AI to write code, they’re relying on AI coding assistants like GitHub Copilot, Cursor, and Windsurf to generate entire functions, suggest architecture patterns, and accelerate feature development. To support this shift, the security […]
Microsoft Unveils LiteBox, a Rust-Based Approach to Secure Sandboxing
Microsoft has released LiteBox, an experimental open-source library OS designed to sandbox applications while reducing their exposure to host systems. Written in Rust and published under the MIT license, LiteBox reflects the company’s efforts to upgrade software security as confidential computing gains adoption. LiteBox takes a different path from traditional virtualization or container technologies. Rather […]
DDoS Traffic Analysis Techniques for SOC Teams
A 60-minute DDoS attack could be launched with just $5 as per pricing on the Dark Web, and this was reduced from $15 in 2021. Unlike advanced attacks such as bot or zero-day attacks, these could be launched by hiring bandwidth on any of the ‘DDoS as a service’ websites. No wonder even Gartner calls […]
Introducing the AI Security Fabric: Empowering Software Builders in the Era of AI
Today, we’re thrilled to introduce the AI Security Fabric, delivered through the Snyk AI Security Platform, and operationalized through a prescriptive path for AI security. As software creation shifts to humans, models, and autonomous agents working together at machine speed, security must evolve just as fundamentally. The AI Security Fabric defines the new paradigm, and […]
Goodbye SDLC, Hello ADLC: How Will AppSec Adapt?
Application security, as it exists today, was shaped by the Software Development Lifecycle. The SDLC assumed that code was written primarily by humans, progressed through recognizable phases, and paused naturally at points where review made sense. Security controls were layered onto those pauses – during pull requests, before releases, or after builds – because that’s where time existed to […]
F5 Strengthens, Scales & Sustains AI Security With Integrated Runtime Protection
Enterprise technology is entering a state of deeper amalgamation and flux. Not because data integration suddenly became important (spoiler alert, it is… and we don’t have enough of it), not because we’re fixing broken data sovereignty issues to address the new world order for information governance (same spoiler, mostly)… and not because the humble application […]
CVE-2026-21858 (Ni8mare): Unauthenticated n8n RCE
A critical unauthenticated remote code execution (RCE) vulnerability has been disclosed in n8n, a widely used open-source workflow automation platform that orchestrates business processes, SaaS integrations, and event-driven automation pipelines. Tracked as CVE-2026-21858 and referred to as Ni8mare, the vulnerability carries a CVSS v3.1 score of 10.0 (Critical) and allows unauthenticated attackers to execute arbitrary […]
Live From Davos: The End of Human-Speed Security
This week, I am joining global policymakers and innovators in Davos for the World Economic Forum. The theme for 2026 is « A Spirit of Dialogue », a recognition that our toughest challenges require shared understanding and cooperation. As we gather to discuss the future of the global economy, we have an opportunity to lead an urgent […]
Developer-First AppSec in the ‘Upside Down’ of Software
For years, software development was more or less predictable. Developers built the stack. Security guarded the stack. Operations kept it standing long enough to make it to Friday. Life seemed normal. Almost like the opening of Stranger Things, when the biggest worries of teenagers in the town of Hawkins were getting a date to the Prom or whether there’d be another Friday the 13th sequel. That ominous netherworld of chaos known as the […]
Background Checks and the EEOC
Background Screening is an encouraged practice during hiring or promoting employees because it promotes a safe working environment, reduces risk to the organization, and helps employers make informed decisions. However, the EEOC clearly states that an employer cannot perform a background check or use that information if it violates equal employment opportunity whether intended or […]