Snyk Learn: New AI security lessons and expanded language support
Snyk Learn added new lessons covering AI security attacks on agentic systems, including code execution, memory poisoning, and inter-agent communication vulnerabilities. Language coverage was also expanded to Python, Rust, and Ruby for OWASP Top 10 lessons.
This month on Snyk Learn, we’ve added new AI security lessons covering the attacks that target agentic systems: getting agents to run code they shouldn't, poisoning their memory to bend their reasoning, and exploiting the gaps where agents talk to each other!
Security lessons
[New][AI-Sec] Unexpected code execution (RCE) - tricking your agentic systems to execute code!
[New][AI-Sec] Memory and Context Poisoning - how corrupted agent memory can silently reshape reasoning, decisions, and behavior.
[New][AI-Sec] Insecure Inter-Agent Communication - exploiting weak communication protections between agents.
[Updated] Generation of predictable numbers - how intruders can use weaknesses in random number generation to launch more successful attacks.
[Updated] Uncontrolled recursion - how infinite loops can ruin your life and crash your systems.
Expanded framework & language coverage
We’ve also expanded Snyk Learn content to cover more of your tech stack:
New/expanded language support:
Multiple lessons expanded into Python, Rust, and Ruby for the OWASP Top 10.
Each new/updated lesson above links directly to the relevant content so you can share it with your teams or assign it as part of your training program with the Snyk Learning Management Add-On. Use Snyk Learn to help your security engineers and developers stay ahead of the latest risks!
Bonus Content
Snyk is also publishing videos on AI coding and AI security on our YouTube channel! If you would like to see content like this on Snyk Learn, use the feedback button on Snyk Learn to let us know.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk CLI v1.1308.1 released
HTML report output is now available by default without preview features, and project names are consistently displayed in test summaries. This release also patches multiple security vulnerabilities.
Pending ignore requests now visible on Project's Issues page
Issues with pending ignore requests now display a clear "Pending Ignore Request" status on the Issues page and in issue details, with filtering support. The issues API now reports pending as part of an issue's ignore status for programmatic distinction of open, pending, and ignored findings.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.