Snyk Blog · News
News listings from Snyk Blog on TechiSeek. 883 public listings.
- Celebrating Juneteenth at Snyk (Snyk Blog)In this post, Snyker Sherica R. Bryan reflects on the importance of Juneteenth, what it means to be free, and the work required to maintain…
- Patches of Pride: Love, inclusivity, & cute pets in celebration of Pride month (Snyk Blog)This month, we ran our “Patches of Pride” campaign to celebrate Pride Month adorably! Our Queer@Snyk Resource Group (SRG) members sent phot…
- Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub (Snyk Blog)In a recent research project, Snyk and Redhunt Labs set out to learn more about the security posture of popular GitHub repositories. Read o…
- Maximizing IAM security with AWS permissions boundaries and Snyk (Snyk Blog)In this post, we'll walk you through maximizing IAM security with AWS permissions boundaries and Snyk IaC.
- Mimic your mental model with Project Collections (Snyk Blog)We’re proud to announce the general availability of Project Collections. Project Collections aims to enable you to create collections of Pr…
- Using insecure npm package manager defaults to steal your macOS keyboard shortcuts (Snyk Blog)In this post, we'll discuss npm postinstall, recent security events involving it, and how to protect the sensitive data stored shortcuts st…
- Building a security-conscious CI/CD pipeline (Snyk Blog)In this post, we'll discuss CI/CD pipelines and how they can be configured to integrate security throughout the development process.
- How to strengthen security in your CI/CD pipeline (Snyk Blog)In this article, you'll learn about security risks that can threaten your CI/CD pipeline. You'll also learn how to build pipelines that are…
- XS leaks: What they are and how to avoid them (Snyk Blog)In this article, we’ll dive deeper into what XS leaks are and how they occur. Then, we’ll review some hands-on examples of how to prevent t…
- Best practices for effective attack surface analysis (Snyk Blog)This article reviews several best practices we can implement to make an attack surface analysis more effective.
- Swift deserialization security primer (Snyk Blog)This blog will detail deserialization vulnerabilities in Swift that can occur when using the popular APIs, NScoding and NSSecureCoding, and…
- Finding and fixing insecure direct object references in Python (Snyk Blog)In this post, we'll review common patterns and types of IDOR vulnerabilities and how to protect against them.
- 8 tips for securing your CI/CD pipeline with Snyk (Snyk Blog)In this post, we’ll cover using Snyk in your CI/CD pipelines to catch security issues quickly and empower your developers to fix them befor…
- 4 Enterprise-level security best practices (Snyk Blog)No matter where you are on your journey to becoming secure at scale, here are four best practices you can implement immediately to get you…
- How secure is WebAssembly? 5 security concerns unique to WebAssembly (Snyk Blog)Developers are embracing WebAssembly for its ability to accelerate complex algorithms, enable gaming and multimedia applications, and provi…
- How Snyk can help secure supply chains per "A Guide to Implementing the Software Bill of Materials… (Snyk Blog)Snyk provides tools to create and scan SBOMs for vulnerabilities, helping organizations meet the requirements laid out by the METI Guide. T…
- Software Supply Chain Security Tools: Types, Features & Considerations (Snyk Blog)Software supply chain security tools provide a range of features to identify and mitigate potential risks and vulnerabilities and play a cr…
- Discussions on improving security through chaos engineering (Snyk Blog)In this post, we'll discuss how chaos engineering can enhance security in your organization.
- New SEC cybersecurity rules put more onus on the CISO, not so much on directors (Snyk Blog)With the SEC's adoption of new rules on cybersecurity risk management, strategy, governance, and incident disclosure by public companies, o…
- 5 tips to supercharge app security from code to cloud (Snyk Blog)As the partnership between Snyk and GitGuardian continues to grow, we’ve collaborated on a new cheat sheet that identifies key security con…
- Snyk Ranked #19 on 2023 Forbes Cloud 100 List (Snyk Blog)Snyk has been named to the prestigious Forbes Cloud 100 list for the fourth consecutive year, coming in at #19. The full list was unveiled…
- .NET developers alert: Moq NuGET package exfiltrates user emails from git (Snyk Blog)On August 8th 2023, the .NET community was made aware that the testing library called Moq exfiltrates developers emails from their developm…
- Secure Java URL encoding and decoding (Snyk Blog)This article discusses Java, why URL encoding and decoding are important, and how to approach it properly.
- What are AI hallucinations and why should developers care? (Snyk Blog)In this blog, we'll discuss the benefits and potential security risks posed by AI hallucinations.
- Introducing Snyk’s new Risk Score for risk-based prioritization (Snyk Blog)We’re happy to announce the open beta availability of Snyk’s new Risk Score!
- Does GitOps enhance application security? (Snyk Blog)In this post, we’ll explore GitOps’ core principles, how they enhance application security, and how GitOps’ rapid-change deployment process…
- Best practices for building a production-ready Dockerfile for PHP applications (Snyk Blog)In this tutorial, you'll learn how to write a dependable Dockerfile for PHP applications.
- How to implement SSL/TLS pinning in Node.js (Snyk Blog)This article explains certificate pinning, highlighting its benefits and use cases in Node.js applications.
- How to use AI for software development and cybersecurity (Snyk Blog)AI-assisted development helps developers build software more efficiently, learn how to leverage AI to write, test and review your code whil…
- Node.js vs. Deno vs. Bun: Performance & JavaScript Runtime Comparison (Snyk Blog)Node.js, Bun, and Deno: we compare these three popular JavaScript runtimes so you can determine which is the right one for your project.
- Fetch the Flag CTF 2023 sneak peek (Snyk Blog)Fetch the Flag, Snyk’s annual Capture the Flag (CTF) competition, brings together thousands of players around the world to solve CTF challe…
- Top considerations for addressing risks in the OWASP Top 10 for LLMs (Snyk Blog)Welcome to our cheat sheet covering the OWASP Top 10 for LLMs where we'll explore the top security risks identified by OWASP.
- A guide to input validation with Spring Boot (Snyk Blog)In this article, you'll learn more about the various applications of Bean Validation, including how to implement it in Spring Boot, enablin…
- Security implications of cross-origin resource sharing (CORS) in Node.js (Snyk Blog)This article will cover what CORS is and some of its use cases, as well as best practices for using CORS and testing the security of your c…
- An Introduction to capture the flag (Snyk Blog)Discover the world of Capture the Flag (CTF) competitions and why they’re essential for mastering cybersecurity skills. Explore the history…
- Modern VS Code extension development: The basics (Snyk Blog)In this part of the "Modern VS Code Extension Development" series, you'll discuss various extension types, delve into the typical architect…
- Developer-first supply chain security (Snyk Blog)Developer-first supply chain security aims to minimize the risk of potential breaches, streamline the development workflow, foster collabor…
- Snyk is named a Strong Performer as a first-time entrant in the Forrester Wave™: Static… (Snyk Blog)We’re thrilled that Snyk has been recognized as a Strong Performer in our first year participating in the Forrester Wave™: Static Applicati…
- How to prevent NullPointerExceptions in Java (Snyk Blog)In this article, you'll learn all about NullPointerExceptions in Java, including their causes, consequences, and most importantly, preventi…
- Signing container images: Comparing Sigstore, Notary, and Docker Content Trust (Snyk Blog)In this article, we will compare three popular container signing solutions: Sigstore Cosign, Notary v2, and Docker Content Trust (DCT), (a.…
- 10 best practices for securely developing with AI (Snyk Blog)This blog post will guide you through the best practices for developing with AI securely, focusing on AI-assisted applications, AI-assisted…
- Modern VS Code extension development tutorial: Building a secure extension (Snyk Blog)In our first modern VS Code extension development blog post, we covered the basics of VS Code development, including the architecture and t…
- Announcing IaC+ early access: Secure your infrastructure configurations across the SDLC (Snyk Blog)We're excited to announce that IaC+ is available in early access via Snyk Preview starting October 3rd, 2023.
- Does AI lead to AppSec hell or nirvana? (Snyk Blog)Ravi Maira and Randall Degges discussed using AI in AppSec during a LinkedIn live discussion in June 2023. Read on to catch some of the hig…
- High severity vulnerability found in libcurl and curl (CVE-2023-38545) (Snyk Blog)In this pre-announcement of a new High severity curl vulnerability, learn how to gauge the potential impact to your organization and get st…
- How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863 (Snyk Blog)Last month, two Critical WebP vulnerabilities (CVE-2023-4863 and CVE-2023-5129) were discovered. In this post, learn how to identify where…
- SAS and Snyk discuss the future of AI for development and security teams (Snyk Blog)At a recent fireside chat, Jared Peterson, SVP of Engineering at SAS, and Ravi Maira, VP of Product Marketing at Snyk, discussed the future…
- Cybersecurity Venture’s 2023 Software Supply Chain Attack Report (Snyk Blog)Cybersecurity Ventures predicts the global cost of software supply chain attacks will reach nearly $138 billion by 2031. Learn more by read…
- How to update cURL (Snyk Blog)In this article, we'll provide remediation strategies for the recent `curl` zero-day vuln.
- Installing and managing Java on macOS (Snyk Blog)This article reviews how to install and manage different versions of Java on your macOS system to help you simplify this process.