Snyk Learn: New AI security lessons and expanded language support
Snyk Learn added new lessons covering AI security attacks on agentic systems, including code execution, memory poisoning, and inter-agent communication vulnerabilities. Language coverage was also expanded to Python, Rust, and Ruby for OWASP Top 10 lessons.
This month on Snyk Learn, we’ve added new AI security lessons covering the attacks that target agentic systems: getting agents to run code they shouldn't, poisoning their memory to bend their reasoning, and exploiting the gaps where agents talk to each other!
Security lessons
[New][AI-Sec] Unexpected code execution (RCE) - tricking your agentic systems to execute code!
[New][AI-Sec] Memory and Context Poisoning - how corrupted agent memory can silently reshape reasoning, decisions, and behavior.
[New][AI-Sec] Insecure Inter-Agent Communication - exploiting weak communication protections between agents.
[Updated] Generation of predictable numbers - how intruders can use weaknesses in random number generation to launch more successful attacks.
[Updated] Uncontrolled recursion - how infinite loops can ruin your life and crash your systems.
Expanded framework & language coverage
We’ve also expanded Snyk Learn content to cover more of your tech stack:
New/expanded language support:
Multiple lessons expanded into Python, Rust, and Ruby for the OWASP Top 10.
Each new/updated lesson above links directly to the relevant content so you can share it with your teams or assign it as part of your training program with the Snyk Learning Management Add-On. Use Snyk Learn to help your security engineers and developers stay ahead of the latest risks!
Bonus Content
Snyk is also publishing videos on AI coding and AI security on our YouTube channel! If you would like to see content like this on Snyk Learn, use the feedback button on Snyk Learn to let us know.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.
Snyk CLI v1.1308.0 released
Introducing HTML report generation for test commands, experimental agent-scan improvements with risk indicators, and substantial reliability fixes for Maven, Gradle, and .NET projects to prevent stack overflows and scanning failures.
ADS installer now available as packaged binary
The Agent Supply Chain Security installer now ships as signed macOS .pkg and Windows .msi packages, eliminating the need for custom scripts and MDM integration. The installer registers scheduled jobs automatically for independent scan execution.