Snyk Blog · News

News listings from Snyk Blog on TechiSeek. 883 public listings.

• Immutable infrastructure: Networks (Snyk Blog)
  If you work with network infrastructure, you know that it has a tendency to grow warts, that is, it drifts from its original configuration.…
• A CEO's guide to Emacs (Snyk Blog)
  For those who haven't used Emacs, it's something you'll likely hate, but may love. It's sort of a Rube Goldberg machine the size of a house…
• Launching Snyk (Snyk Blog)
  I’m excited to announce Snyk is now live! Snyk helps you find and fix known vulnerabilities in your Node.js dependencies. These are publicl…
• Architecting a Serverless web application in AWS (Snyk Blog)
  With AWS Lambda, your code is automatically scaled to meet requests. This kind of direct computing is on a trajectory of voracious expansio…
• 4 steps to address vulnerable dependencies (Snyk Blog)
  Creating Snyk’s GitHub integration, released in late June, helped clarify the different steps to truly address vulnerable dependencies, bot…
• Using ES2015 Proxy for fun and profit (Snyk Blog)
  A discussion for JS developers about how to have some fun with the useful ECMAScript 2015 "Proxy" feature, which enables you to create a pr…
• Threat modelling For Node.js applications (Snyk Blog)
  What should I defend my application against? Should I deal with Cross-Site Scripting (XSS) attacks? How about SQL injection? Should I prote…
• Get Snyk security alerts on Slack (Snyk Blog)
  You can now receive Snyk security alerts via Slack! This blog provides an overview of how to implement Snyk's Slack integration.
• Launching "The Secure Developer" Podcast (Snyk Blog)
  Launching "The Secure Developer" Podcast
• Announcing Snyk for Bitbucket Pipelines (Snyk Blog)
  We’re excited to announce Snyk for Bitbucket Pipelines, which makes it easy to stay secure if you’re managing your work with the Atlassian…
• Yarn is Micro Secure (Snyk Blog)
  In 2016, Facebook announced the open-source release of Yarn: an alternative client for the npm registry. While it’s true that Yarn is often…
• Building Security Tools Developers Love (Snyk Blog)
  In the latest episode of “The Secure Developer”, I had the pleasure of interviewing Sabin Thomas, VP Engineering at Codiscope.
• Launching serverless Snyk (Snyk Blog)
  Today we’re releasing the Serverless Snyk plugin—a plugin for the Serverless framework that helps you to prevent vulnerable packages in you…
• Announcing Snyk for Ruby (Snyk Blog)
  Today, we’re announcing Snyk’s support for Ruby
• A brief history of modularity (Snyk Blog)
  Just over a week ago, we were sponsors at the Brighton conference, ffconf. It was a day full of brilliant talks, both thought provoking and…
• Fixing a Remote Code Execution Vulnerability in EJS (Snyk Blog)
  This week we added a high-severity Remote Code Execution vulnerability in the EJS package to our vulnerability database.
• Differences in version handling between RubyGems and npm (Snyk Blog)
  Differences in version handling between RubyGems and npm
• Announcing Snyk CLI for Ruby, and more ways to fix Ruby vulnerabilities (Snyk Blog)
  Since we launched Ruby last month, we’ve been working away on improvements. Today we’re excited to let you know about our extended support…
• Building the VSTS Snyk task, an interview with Jesse Houwing (Snyk Blog)
  Jesse Houwing is a Lead Consultant at Xpirit. Recently he published a really helpful Visual Studio Team Services (VSTS) task making it easi…
• The MongoDB hack and the importance of secure defaults (Snyk Blog)
  There’s a widespread attack on insecure MongoDB installs that has resulted in over 28,000 databases being held ransom. This post explains t…
• Requiring authentication in Snyk CLI (Snyk Blog)
  Requiring authentication in Snyk CLI
• Regular Expression Denial of Service (ReDoS) and Catastrophic Backtracking (Snyk Blog)
  The level of danger when it comes to regular expressions and security is quite high. In this post we explain what a regular expression deni…
• Introducing pkgbot! (Snyk Blog)
  Meet pkgbot – the bot making security analyst lives easier at Snyk!
• Building the Gulp Snyk plugin, an interview with Doug Wade (Snyk Blog)
  Doug Wade is a Senior Front-End Engineer at Indeed. Doug built the wonderful gulp-snyk plugin, which lets you seamlessly include Snyk in yo…
• Understanding Responsible Disclosures (Snyk Blog)
  This post discusses the responsible disclosure of security vulnerabilities.
• Fixing XXE Vulnerabilities in Nokogiri (Snyk Blog)
  We recently added a pair of high-severity XML External Entities (XXE) vulnerabilities found in the Nokogiri library to our vulnerability da…
• How Voltos Uses Snyk to Secure Their Own Security Product (Snyk Blog)
  This is a guest post from Glenn Gillen. Glenn is one of the co-founders of Voltos, a service to help you securely manage your apps and serv…
• Announcing Snyk’s Integration with Xray (Snyk Blog)
  We’re big fans of open-source development at Snyk. It’s why we built Snyk in the first place: so people could safely use open-source depend…
• Diagnosing and fixing memory leaks in Python (Snyk Blog)
  One thing we've learned from building complex software for the cloud is that a language is only as good as its debugging and profiling tool…
• The Frequency of Known Vulnerabilities in JavaScript Libraries (Snyk Blog)
  An interesting whitepaper was released at the 2017 NDSS Symposium discussing a large-scale attempt at determining just how vulnerable clien…
• Fixing a Prototype Override Protection Bypass Vulnerability in qs (Snyk Blog)
  Last month, we added a high-severity Prototype Override Protection Bypass vulnerability in the qs package to our database. The fix was rele…
• Building a Snyk Plugin for VS Code: An Interview with Peter Benjamin (Snyk Blog)
  Peter Benjamin (@pmbenjamin) is a Senior Software Engineer on the Cyber Security Team at Intuit. Peter recently published a fantastic VS Co…
• Type Manipulation: Escaping Template Sandboxes (Snyk Blog)
  In this post, we’ll focus on using type manipulation to circumvent template-frameworks sandboxes.
• 77% of sites use at least one vulnerable JavaScript library (Snyk Blog)
  The other week a paper was released that reported that about 37% of sites included at least one JavaScript library with a known vulnerabili…
• Continuously secure all apps with unlimited Snyk projects (Snyk Blog)
  We're excited to announce we’re overhauling our pricing to make Snyk projects, and the ongoing protection they offer, free.
• Maven support is here! (Snyk Blog)
  Today we’re excited to announce Snyk’s support for Java and other Maven supporting languages!
• Serverless Security implications—from infra to OWASP (Snyk Blog)
  By its very nature, Serverless (FaaS) addresses some of today’s biggest security concerns but it doesn’t fix it all. This post outlines the…
• Introducing Snyk for Serverless (Snyk Blog)
  Today we’re excited to announce Snyk’s new solution for securing your serverless functions, designed to easily integrate and protect server…
• Snyk for your Enterprise (Snyk Blog)
  Snyk for your Enterprise
• Launching the State of Open Source Security Survey (Snyk Blog)
  Launching the State of Open Source Security Survey
• JavaScript and Node.js Security – The Common Pitfalls (Snyk Blog)
  Guy Podjarny live hacks a Node.js application to exploit vulnerabilities in real world packages. In this edited down video from the JSKongr…
• Local Type Inference Cheat Sheet for Java 10 and beyond! (Snyk Blog)
  One of the main features in Java 10 in Local Type Inference, which allows us to substitute a type with the var reserved word in our source…
• Skyscanner fixed projects and gained visibility into their open source vulnerability exposure. (Snyk Blog)
  Skyscanner today monitors nearly 500 separate projects with Snyk, and is able to understand the state of their security as well as address…
• JVM Ecosystem Survey 2018 (Snyk Blog)
  We’re excited to launch the a brand new survey called the JVM Ecosystem Survey 2018 in partnership with the Java Magazine. Also, if we reac…
• Snyk Named a 2018 Gartner Cool Vendor in Application and Data Security (Snyk Blog)
  We’re extremely humbled and honored to have Gartner name Snyk as a May 2018 Cool Vendor in Application and Data Security!
• Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip (Snyk Blog)
  The Snyk Security team is today announcing the public disclosure of a critical arbitrary file overwrite vulnerability called Zip Slip. It i…
• Introducing service accounts: API tokens for your org (Snyk Blog)
  One of our most frequent feature requests recently has been for the ability to generate an API token that isn’t tied to a particular user.…
• Snyk (Snyk Blog)
  Over the past few months, we’ve been working closely with customers who use Snyk alongside various issue trackers as a way of managing thei…
• Critical Arbitrary Code Execution Vulnerability Found in Kubernetes (Snyk Blog)
  An examination of the critical Kubernetes vulnerability identified as CVE-2018-1002105, which allows an attacker to gain remote access to b…
• 2018 Year in Review (Snyk Blog)
  Snyk's Liran Tal looks back at the year 2018 in developer security.