Snyk Blog · News

News listings from Snyk Blog on TechiSeek. 883 public listings.

• Understanding Amazon S3 security and compliance on AWS (Snyk Blog)
  Mismanaging the configuration of your Amazon S3 resources can lead to significant security and compliance incidents. Learn how to prevent t…
• Snyk Voted Next European Unicorn for B2B Enterprise (Snyk Blog)
  We are pretty excited to share that last week Snyk was recognized as a ‘Next European Unicorn’ at the 2019 Vivatech Awards.
• Java Top 10 Security Vulnerabilities Disclosed [2019 - List] (Snyk Blog)
  In this post, we’ll take a look at the vulnerabilities that have been found in the top ten Java libraries picked by OverOps, and focus on t…
• 10 Serverless security best practices (Snyk Blog)
  10 serverless security best practices for securing your serverless and cloud functions, from managing secrets, to data security, function i…
• npm passes the 1 millionth package milestone! What can we learn? (Snyk Blog)
  June 4th is a historic date: it's the date that the millionth package was indexed into the npm registry. npm is a package manager for JavaS…
• What’s new in Snyk? (Snyk Blog)
  Here's the first installment of our bi-weekly updates on what's new in Snyk.
• Best practices for secrets management in serverless applications (Snyk Blog)
  Best practices for secrets management in serverless applications
• Yet another malicious package found in npm, targeting cryptocurrency wallets (Snyk Blog)
  Cryptocurrency wallet developer Komodo has been in the news recently as the most recent victim of an attempted cryptocurrency attack by mal…
• New O’Reilly Book: Securing Open Source Libraries by Guy Podjarny (Snyk Blog)
  Snyk has partnered with O’Reilly to offer a new book
• Serverless is great, but what about the security of my AWS Lambda functions and their dependencies? (Snyk Blog)
  To emphasize the complexity of tracking a function's dependencies, in a recent State of Open Source Security report 2019 Snyk showed that s…
• Snyk research team discovers severe prototype pollution security vulnerabilities affecting all… (Snyk Blog)
  On July 2nd, 2019, Snyk published a high severity prototype pollution security vulnerability (CVE-2019-10744) affecting all versions of lod…
• Concerns of supply-chain attacks amplify as remote code execution was found in Ruby gem… (Snyk Blog)
  On July 5th, 2019, the CVE-2019-13354 security advisory was published for a malicious version of the strong_password Ruby gem which allows…
• How SME lender New10 uses AWS and Snyk to deliver quickly and securely (Snyk Blog)
  In this post, we’ll look at how New10 has leveraged both AWS and Snyk to deliver value to their customers faster and with security always a…
• How to increase Serverless observability, monitoring and security (Snyk Blog)
  Functions are often short-lived and deployed in large numbers and are invoked more and more frequently as you scale. For these reasons, it'…
• Scaling developer-first security (Snyk Blog)
  Snyk brings this dev-first, product-led approach to the security industry, on a mission to solve software security efficiently and at scale…
• PCI standards open source security requirements — how to comply? (Snyk Blog)
  The growth of open source alongside the lagging security standards has led many regulatory bodies and industry watchdogs to move toward str…
• Snyk has acquired DevSecCon! (Snyk Blog)
  We are thrilled to announce that Snyk has acquired DevSecCon, the world’s premier conference dedicated to DevSecOps – getting developers an…
• Unique to the .NET ecosystem, 75% of the top twenty vulnerabilities have a high severity rating (Snyk Blog)
  Welcome to our new security report: .NET open source security insights.
• .NET open source security insights (Snyk Blog)
  Welcome to our new security report: .NET open source security insights.
• Remote code execution, cross-site scripting, and denial of service vulnerabilities account for 2/3… (Snyk Blog)
  Welcome to our new security report: .NET open source security insights.
• Fix open source vulnerabilities directly from your Eclipse IDE (Snyk Blog)
  We are excited to share that developers can now test and monitor their projects for open source vulnerabilities, natively from within their…
• Staying ahead of security vulnerabilities with security patches (Snyk Blog)
  Snyk curates security patches for open source JavaScript projects in the npm ecosystem. By doing so, we help maintainers keep their package…
• A technical analysis of the Capital One cloud misconfiguration breach (Snyk Blog)
  This is a technical exploration of how the Capital One breach might have occurred, based on the evidence we have from the criminal complain…
• Announcing new container registry integrations (Snyk Blog)
  Snyk is excited to share that we’ve recently added new integrations with your container registries, including Amazon Elastic, Google and Mi…
• Best practices for rolling out Snyk (Snyk Blog)
  The first question many customers ask us after purchasing Snyk is—now how do we roll out the product throughout the company? In this post,…
• Securing Go modules made easy (and accurately!) (Snyk Blog)
  We are excited to share that starting today, developers can test and monitor their Go projects, which use modules, for open source vulnerab…
• Kubernetes open sourced their security audit. What can we learn? (Snyk Blog)
  Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized application…
• Automating open source security scanning with Snyk and CircleCI (Snyk Blog)
  We're excited to announce that Snyk has partnered with CircleCI to help you use open source and stay secure.
• Securing Artifactory using Snyk (Snyk Blog)
  We're excited to share that starting today, you can make sure that vulnerable artifacts will not be used in your organization by using Snyk…
• A year-old dormant malicious remote code execution vulnerability discovered in Webmin (Snyk Blog)
  On August 17, 2019, the Webmin team announced the release of Webmin 1.930 and Usermin 1.780. These releases address a newly discovered remo…
• Jackson Deserialization Vulnerability (Snyk Blog)
  On July 29th, 2019 a high severityDeserialization of Untrusted Data vulnerability (CVE-2019-14379,CVE-2019-14439) affecting all versions of…
• Code execution back door found in Ruby’s rest-client library (Snyk Blog)
  On August 19th, 2019 rest-client, a simple HTTP and REST client for Ruby, reported a new security threat. A maintainer’s RubyGem account wa…
• Mastering Node.js version management and npm registry sources like a pro (Snyk Blog)
  This post explores how to make it easier to switch between different Node.js versions and to switch between different npm registries while…
• Open source security with O’Reilly author Guy Podjarny (Snyk Blog)
  Open source security with O’Reilly author Guy Podjarny
• 6 stages of refactoring a Jest test case (Snyk Blog)
  An underrated feature of Jest is customizing the way assertion errors that the console displays when tests fail are handled.
• Making climate positive changes (Snyk Blog)
  Hey I’m Luke, an engineer at Snyk based in Amsterdam. I wanted to share my story about making climate positive changes.
• Snyk Raises $70M to Accelerate Dev-first Security (Snyk Blog)
  The Snyk Team is thrilled to announce we have raised $70 million investment, led by Accel and existing investors GV and Boldstart Ventures,…
• Sequelize ORM npm library found vulnerable to SQL Injection attacks (Snyk Blog)
  We’ve written about SQL Injection and ORMs in more detail in the past. In this post, we'll focus on the recent SQL injection example that t…
• Everything you wanted to know about addressing security vulnerabilities in Linux-based containers (Snyk Blog)
  Here at Snyk we try to make the process of choosing the most secure base image smarter, smoother and most importantly, more data-driven. Fi…
• Modern security leader spotlight: with Marcin Hoppe from Auth0 (Snyk Blog)
  The Auth0 team uses Snyk to "make sure we are running on a secure foundation, no matter what."
• Why npm lockfiles can be a security blindspot for injecting malicious modules (Snyk Blog)
  In this post, we show you how easy it is to introduce back doors that are easily missed by project owners… leaving your code insecure.
• The Secure Developer: talking DevSecOps in Azure with Microsoft’s Victoria Almazova (Snyk Blog)
  Snyk wants to help developers adopt a security mindset throughout their development process, and The Secure Developer community is the plac…
• Shifting compliance left: Helping legal teams and developers cooperate around licensing issues (Snyk Blog)
  We are excited to share that we now support customized license instructions, helping the teams in your organization collaborate better toge…
• Trend Micro and Snyk partner to deliver complete remediation to secure containers (Snyk Blog)
  We’re excited to announce a new strategic partnership with Trend Micro to help businesses quickly deliver secure applications.
• Using Open Policy Agent (OPA) for cloud security and compliance (Snyk Blog)
  Open Policy Agent (OPA) is an open source general-purpose policy engine, and Rego is OPA’s declarative policy language. Combined with Fugue…
• Snyk joins CloudBees new Technical Alliance Partner Program as Premier launch member (Snyk Blog)
  We’re thrilled to join CloudBees’ new Technical Alliance Partner Program to take our collaboration with the CI/CD and application release o…
• Container security throughout the SDLC (Snyk Blog)
  The container image, technically defined in the OCI image specification, is a key component of modern tooling, from Docker to Kubernetes to…
• A recap from our latest PCI webinar, and compliance tips from Deliveroo (Snyk Blog)
  PCI has many requirements that apply to the implementation, configuration, and development of payment software. As with other compliance fr…
• Shifting security left means culture, not just tools (Snyk Blog)
  When it comes to security, the movement toward DevOps is really just beginning. If we want security to make this move effectively, we need…
• 2019 side-by-side comparison of Angular and React security vulnerabilities (Snyk Blog)
  Welcome to Snyk's State of JavaScript frameworks security report 2019. In this section, we review the impact that security vulnerabilities…