Snyk Blog · News
News listings from Snyk Blog on TechiSeek. 883 public listings.
- JavaScript type confusion: Bypassed input validation (and how to remediate) (Snyk Blog)Learn about common type confusions scenarios where input sanitisation and validation can be bypassed by providing an unexpected input type.…
- How and when to use Docker labels / OCI container annotations (Snyk Blog)Learn about Docker labels ("annotations" in the OCI Image Specification) what they are, some standardized uses as well as some practices yo…
- Lessons learned from improving full-text search at Snyk with Elasticsearch (Snyk Blog)We’re currently moving the "issues" tab of Snyk reports over to Elasticsearch. Read what we learned about in terms of analyzers, tokenizers…
- Exploring extensions of dependency confusion attacks via npm package aliasing (Snyk Blog)Learn about a new extension to dependency confusion which has its premise on npm’s package aliasing capabilities.
- How Datto made developer-first security a reality with Snyk (Snyk Blog)Learn about Datto’s nearly painless adoption of developer-first security and how it offers a model nearly any company can follow at a time…
- How Snyk Code prioritizes vulnerabilities using their Priority Score (Snyk Blog)Snyk’s Priority Scores are more than just a number. Learn about the thinking process behind the score as well as give you some practical ti…
- How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint (Snyk Blog)Learn how to detect and prevent the Trojan Source vulnerability in your JavaScript ecosystem. This attack relies on reviewers confusing the…
- Snyk IaC wins 2021 CRN Tech Innovator Award & continues to grow channel business (Snyk Blog)We’re very excited to say that this week Snyk Infrastructure as Code (IaC) was named the winner of the cloud security category for the 2021…
- Scanning ARM templates for misconfigurations with the Snyk CLI (Snyk Blog)Given the massive demand for and popularity of Azure Resource Manager (ARM), we are excited to announce you can now use Snyk Infrastructure…
- Best practices for containerizing Python applications with Docker (Snyk Blog)In this post, we’ll attend to those concerns and take a look at some 6 best practices when containerizing Python applications with Docker.
- AppSec during hypergrowth: Empower your developers to overcome the tech talent shortage (Snyk Blog)Hypergrowth companies face a number of challenges related to development and application security. Read on to learn how to overcome them by…
- Proactively fixing vulnerabilities to maintain Java security and project hygiene with Snyk (Snyk Blog)In this post, we’ll see how to maintain the health and hygiene of projects and repositories we are no longer working on, with a focus on Ja…
- Announcing automated fixes for vulnerabilities in .NET dependencies (Snyk Blog)We’re pleased to announce improved support for .NET applications in Snyk Open Source, allowing developers to fix vulnerabilities in .NET de…
- How to prevent Trojan Source attacks with Snyk Code (Snyk Blog)Learn to use Snyk Code to find and fix Trojan Source in your source code.
- Developing custom IaC rules with Snyk (Snyk Blog)Developing custom IaC rules with Snyk
- Snyk Career Stories: Starting and growing your career through the Snyk SDR program (Snyk Blog)At Snyk, we are deeply invested in career progression and offer our teams tools, skills, and development opportunities necessary to enable…
- Securing your open source dependencies with the Snyk Visual Studio Code extension (Snyk Blog)We’re pleased to announce new functionality within the Snyk Visual Studio Code extension, making it easier for developers to find and fix v…
- Responsible disclosure: CodeCov CEO & CTO share learnings from the breach (Snyk Blog)Learn how CodeCov handled the responsible disclosure of their breach to their userbase in 2021.
- Find and fix the Log4Shell exploit fast with Snyk (Snyk Blog)See how easy (and fast) it is to find and automatically fix Log4Shell with Snyk.
- Build securely with Snyk and GKE Autopilot (Snyk Blog)The Snyk platform works seamlessly with GKE Autopilot: a revolution in managed Kubernetes. Customers can quickly get started securing workl…
- Microservices security: 6 best practice tips (Snyk Blog)Learn more about the unique requirements for microservices security architecture to keep your systems and applications secure.
- Automating Terraform security in Scalr deployments with Regula [Tutorial] (Snyk Blog)Regula enables cloud teams to evaluate Terraform, CloudFormation, Azure Resource Manager, and Kubernetes Infrastructure-as-Code (IaC) for s…
- Hiring a virtual CISO to help your security team (Snyk Blog)A virtual CISO is a part-time or remote security practitioner or provider who offers their time and expertise to an organization on a tempo…
- 6 Kubernetes Tools That Can Help Secure Containers at Runtime (Snyk Blog)Kubernetes provides a powerful platform for container orchestration, but it's essential to implement additional security measures to protec…
- Announcing organizational updates to better serve our customers (Snyk Blog)Earlier today, we informed the Snyk team of important recent organizational updates to better serve our customers and improve operational e…
- 10 React security best practices (Snyk Blog)We’ve created this checklist of React security best practices to help you and your team find and fix security issues in your React applicat…
- Python Code Review Tools (Snyk Blog)Learn more about the top Python code review tools for Developers that will improve the speed and efficiency, and security of software throu…
- 10 best practices to build a Java container with Docker (Snyk Blog)Step-by-step best practices for building a Java container and running it inside a Docker image.
- OWASP API Security Top 10 Risks (Snyk Blog)The OWASP API Security Project released in 2019 is still vital in 2022. Learn how API’s are commonly exploited, and how to protect your API…
- 7 Best practices for disaster recovery testing (Snyk Blog)Learn about the importance of implementing rigorous disaster recovery testing, and best practices for ensuring disaster recovery testing.
- 2022 Snyk Customer Value Study highlights: The impact of developer-first security (Snyk Blog)Learn about the 2022 Snyk Customer Value Study. The goal of this study was to understand our customers’ most important value drivers, disco…
- Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text (Snyk Blog)In this post we’ll review CVE-2022-42889, the recent Arbitrary Code Execution Vulnerability in Apache Commons Text, including what it is, h…
- SREs bring ORDER(R) to CHAOS (Snyk Blog)In this post, Snyk Ambassador Keith McDuffee will lead us through a discussion on how site reliability engineers (SREs) bring order to the…
- How to make a mock API server in JavaScript (Snyk Blog)In this article, you’ll learn more about mock API servers, the tools you can use to create mock APIs, how you can use them to speed up your…
- Cloud security fundamentals part 3: Empower your developers (Snyk Blog)A discussion of the third of five fundamentals of cloud security: empowering your developers. (Part three in a five-part series.)
- How to send Snyk vulnerability data to the New Relic observability platform (Snyk Blog)Learn to leverage the different options that the Snyk platform provides to send all your application security vulnerabilities found by Snyk…
- SnykLaunch recap: Snyk Cloud, SBOM & reporting capabilities, and customer solutions resources (Snyk Blog)At SnykLaunch, our product leaders unveiled the latest additions to Snyk's suite of developer-first products — including the announcement o…
- Fetch the Flag CTF 2022 writeup: File Explorer (Snyk Blog)Learn how to solve the File Explorer challenge from Snyk's 2022 Fetch the Flag CTF competition.
- Kubernetes network policy best practices (Snyk Blog)This article will explore Kubernetes NetworkPolicy by creating an example network policy and examining its core parameters. Then, we'll loo…
- Cloud security updates you need to know from re:Invent 2022 (Snyk Blog)Read all about the important cloud security updates from re:Invent 2022.
- 5 "no experience needed" tips for building secure applications (Snyk Blog)Learn about the developer security tooling from Snyk that will help you level up your skills to find and fix security vulnerabilities in th…
- How to build a secure API gateway in Node.js (Snyk Blog)In this article, we'll build a secure API gateway from scratch using only Node.js and a couple of open source packages. All you need is bas…
- You should be using HTTP Strict Transport Security (HSTS) headers in your Node.js server (Snyk Blog)Take an in-depth look at HTTP Strict Transport Security (HSTS) headers to discover how they affect web security and why we should use them…
- Creating AWS security efficiencies in IT (Snyk Blog)In this post, we'll discuss several steps that your teams can take to create AWS efficiencies and streamline cloud security.
- Supply chain security incident at CircleCI: Rotate your secrets (Snyk Blog)On January 4, CircleCI, an automated CI/CD pipeline setup tool, reported a security incident in their product by sharing an advisory.Learn…
- Prevent OWASP Top 10 vulns with new Snyk Learn learning path (Snyk Blog)Snyk Learn just released a free learning path for the OWASP Top 10, a widely-recognized list of the most critical security risks facing web…
- Snyk enhances ServiceNow with comprehensive insights into vulnerabilities in open source software (Snyk Blog)We’re excited to announce a new partnership to bring Snyk security insights to ServiceNow workflows. The integration between Snyk Open Sour…
- Adding security to Nuxt 3 (Snyk Blog)In this article, I would like to introduce you to the new Nuxt module that I recently created that should help you build more secure Nuxt a…
- Advanced IntelliJ debugger features you’re missing out on (Snyk Blog)In this post, we will cover three Advanced IntelliJ debugger features that I’ve found to be audience favorites when giving talks on this su…
- 4 application security bad habits to ditch in 2023 (and best practices to adopt instead) (Snyk Blog)Learn four examples of bad security habits that are “so last year” and some better alternatives to adopt in 2023.