Snyk Blog · News

News listings from Snyk Blog on TechiSeek. 883 public listings.

• How to protect Node.js apps from CSRF attacks (Snyk Blog)
  How to protect Node.js apps from CSRF attacks
• How to secure JavaScript applications right from the CLI (Snyk Blog)
  This article will guide you through the process of securing your JavaScript applications using the Snyk CLI.
• Why You Need a Security Companion for AI-Generated Code (Snyk Blog)
  Speed up security for AI generated code with a security companion that works alongside generative AI, enabling both efficiency and security…
• Weak Hash vulnerability discovered in crypto-js and crypto-es (CVE-2023-46233 & CVE-2023-46133) (Snyk Blog)
  Learn how to find and fix the new "Use of Weak Hash" vulnerability in crypto-js and crypto-es that was reported on October 18, 2023.
• Dependency injection in Python (Snyk Blog)
  This tutorial will show you how DI works, how to use it, and how it can make your Python projects better.
• Rego 101: Introduction to Rego (Snyk Blog)
  Learn how to write your first policy as code rules in Rego. This Rego tutorial for beginners covers the basics of Rego syntax and using OPA.
• Security vs. Development: A game of priorities (Snyk Blog)
  To harness the full potential of developer-first security tools, a strategic alignment between the Development and Security organizations i…
• Secure your software supply chain with the new Snyk Vulnerability Intelligence for SBOM ServiceNow… (Snyk Blog)
  The new Snyk Vulnerability Intelligence for SBOM integration brings visibility to your SBOMs in ServiceNow Vulnerability Response for a mor…
• What’s new in CVSS 4.0 (Snyk Blog)
  In this blog post, we will highlight Snyk’s view on the new vulnerability scoring framework, CVSS 4.0, which was released on November 1, 20…
• Snyk Week of Impact 2023: A week of meaningful contributions and community engagement (Snyk Blog)
  The Snyk Week of Impact, from October 22-27, was not just another event. It was a manifestation of our core belief in giving back. In a con…
• Real-time threat protection with Snyk and SentinelOne (Snyk Blog)
  We're thrilled to announce Snyk’s integration with SentinelOne, offering a unified view that bridges the gap between build-time vulnerabili…
• Rego 102: Combining queries with AND/OR and custom messages (Snyk Blog)
  Learn how to use AND and OR rules and custom messages using OPA and Rego in the second part of our beginner's guide to Rego.
• Demystifying the AWS shared security responsibility model (Snyk Blog)
  Learn how AWS’s shared security responsibility model works and how Snyk can help you streamline your cloud and application security efforts.
• Snyk achieves AWS Security Competency (Snyk Blog)
  We are thrilled to announce that Snyk, a leading provider of cloud native application security solutions, has achieved the prestigious AWS…
• Vulnerability vs Weakness: Understanding Key Differences in AppSec (Snyk Blog)
  Vulnerabilities and weaknesses both introduce risk but have key differences. Learn how to assess your apps to find and fix both vulnerabili…
• Improving the UI/UX of the Snyk VS Code extension (Snyk Blog)
  Learn how Snyk's product designers approached the UI/UX of the Snyk VS Code extension to improve consistency, reduce cognitive load and vis…
• Our favorite 2023 Snyk Fetch the Flag CTF writeups from the community (Snyk Blog)
  Fetch the Flag CTF 2023 took place October 27-28, bringing together thousands of players worldwide to compete to solve 30+ hacking challeng…
• Exploring WebExtension security vulnerabilities in React Developer Tools and Vue.js devtools (Snyk Blog)
  Snyk's security researchers have identified and disclosed some vulnerabilities within some popular browser extensions: React Developer Tool…
• A DevSecOps solution for your apps on AWS from Snyk (Snyk Blog)
  Learn how Snyk can help you adopt a DevSecOps of continuous security for your apps on AWS.
• 4 Advantages of using AI code review (Snyk Blog)
  AI code review reports on critical bugs in real time and shows you how to fix them. Discover even more benefits and how Snyk code review ca…
• Snyk is your security companion for Amazon CodeWhisperer (Snyk Blog)
  Use Snyk alongside Amazon CodeWhisperer to get best-in-class security while maintaining your speed of development
• Snyk Fetch the Flag CTF 2023 writeup: Audiopolis (Snyk Blog)
  If you were at Snyk’s 2023 Fetch the Flag and are looking for the answer to the Audiopolis challenge, you’ve come to the right place. Let’s…
• Snyk Fetch the Flag CTF 2023 writeup: Silent Cartographer (Snyk Blog)
  If you were at Snyk’s 2023 Fetch the Flag and are looking for the answer to the Silent Cartographer challenge, you’ve come to the right pla…
• Snyk Fetch the Flag CTF 2023 writeup: Protect The Environment (Snyk Blog)
  If you were at Snyk’s 2023 Fetch the Flag and are looking for the answer to the Protect The Environment challenge, you’ve come to the right…
• Snyk Fetch the Flag CTF 2023 writeup: I Do Math (Snyk Blog)
  If you were at Snyk’s 2023 Fetch the Flag and are looking for the answer to the I Do Math challenge, you’ve come to the right place. Let’s…
• Achieving developer security adoption at Nylas with Snyk (Snyk Blog)
  Learn how Nylas leverages Snyk to drive developer security adoption and simplify the integration of AppSec tools into their workflows.
• Accelerate C/ C++ security with Snyk (Snyk Blog)
  Today, Snyk is welcoming C/C++ security into the world of modern development with the general availability of C/C++ support for Snyk Code!
• Secure password hashing in Go (Snyk Blog)
  Secure password hashing in Go
• Three reasons to invest in an ASPM solution in 2024 (Snyk Blog)
  Learn three compelling reasons to invest in an application security posture management (ASPM) solution like Snyk AppRisk.
• Announcing Snyk AppRisk: Elevate your AppSec game with ASPM (Snyk Blog)
  Announcing Snyk AppRisk for ASPM to revolutionize the way AppSec teams manage and enhance the security posture of their applications with S…
• Snyk highlights AWS re:Invent 2023 (Snyk Blog)
  In this blog, we recap the most exciting developments from AWS re:Invent 2023, including Snyk's industry-leading progress with generative A…
• Top 3 security best practices for handling JWTs (Snyk Blog)
  In this blog post, we will discuss the top three security best practices for handling JWTs. We will also provide practical examples using P…
• Vulnerability disclosure: Which comes first, the security bug in PHP or the CVE? (Snyk Blog)
  In this post, we cover the CVE reporting process using the Use After Free vulnerability type as an example.
• Command injection in Python: examples and prevention (Snyk Blog)
  In this article, you’ll learn all about command injection, including how this vulnerability can manifest in your programs. You'll also lear…
• 3 tips for rebuilding a Docker image faster (and save CI seconds!) (Snyk Blog)
  Learn about three great ways to rebuild a Docker image faster: Add a .dockerignore file to your repository, use a dependency lockfile, and…
• Krampus delivers an end-of-year Struts vulnerability (Snyk Blog)
  CVE-2023-50164 is a critical vulnerability in the Apache Struts library. Learn how to find and fix by upgrading your package and using Snyk…
• Build and deploy a Node.js security scanning API to Platformatic Cloud (Snyk Blog)
  In this guide, we'll dive into the powerful combination of Platformatic, Fastify, and Snyk, unlocking rapid backend development with an emp…
• Snyk welcomes Helios, accelerating our ASPM vision with runtime insights (Snyk Blog)
  Snyk announces acquisition of Helios, accelerating application security posture management (ASPM) capabilities with runtime insights.
• New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends (Snyk Blog)
  This year, we asked the DevRel and SecRel team at Snyk and security experts from around the industry to drop in their personal and professi…
• 3 tips from Snyk and Dynatrace’s AI security experts (Snyk Blog)
  Learn more about generative AI security in this recap from our recent fireside chat, featuring security and privacy experts from Snyk and D…
• The 4 best DevSecOps tools for a secure DevOps workflow (Snyk Blog)
  Learn how DevSecOps tools integrate security into your DevOps workflow from deployment to production.
• 7 tips to become a successful bug bounty hunter (Snyk Blog)
  In this post, we'll cover what bug bounty hunting is, the difference between vulnerability disclosure programs and bug bounty programs, and…
• 10 GitHub Security Best Practices (Snyk Blog)
  In this cheat sheet, we will discuss ten best practices you can implement to improve your GitHub security. Download the one-pager and read…
• Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to… (Snyk Blog)
  We are excited to welcome two critical additions to the Snyk executive bench: Danny Allan, our new Chief Technology Officer, and Brian Roga…
• Automatic source locations with Rego (Snyk Blog)
  We recently released a series of improvements to Snyk IaC, and in this blog post, we’re taking a technical dive into a particularly interes…
• Reporting AppSec risk up to your CISO (Snyk Blog)
  Learn what information CISOs need to know about your application security program in order to have a clear understanding of risk.
• Snyk & Atlassian: How to embed security in AI-assisted software development (Snyk Blog)
  Developers are using AI, and there’s no turning back. Here’s how you can minimize vulnerabilities and security risks associated with AI cod…
• Preventing server-side request forgery in Node.js applications (Snyk Blog)
  This article will explore SSRF, its potential risks, and the strategies to mitigate SSRF in Node.js applications.
• Preventing SQL injection attacks in Node.js (Snyk Blog)
  In this article, you'll learn more about why SQL injection attacks pose a significant threat and how to shield your Node.js applications ag…
• How to build a modern DevSecOps culture: Lessons from Jaguar Land Rover and Asda (Snyk Blog)
  Organizations experience different pain points when implementing a DevSecOps culture, but the fundamentals of people, process, and tooling…