Snyk Blog · News

News listings from Snyk Blog on TechiSeek. 883 public listings.

• Announcing the Snyk and Docker Security Guide for Developers (Snyk Blog)
  For the past few months, as the engineers have been integrating our products, the Snyk and Docker teams have been collaborating on a securi…
• International Men’s Day—it’s time to talk (Snyk Blog)
  Today (Thursday, 19th November), is International Men’s Day, a day when we celebrate the positive value men bring to the world and raise aw…
• Docker for Java developers: 5 things you need to know not to fail your security (Snyk Blog)
  How do we make security an essential part of Docker for Java developers?
• Kubernetes Operators: automating the release process (Snyk Blog)
  In this blog, we'll discuss the release process for our Kubernetes Operator, and show how we've automated deploying the release across mult…
• Buffer overflow in Chromium affecting multiple packages (Snyk Blog)
  Welcome to the Snyk Monthly Vulnerability Profile. This month we’re looking at a buffer overflow vulnerability discovered in the FreeType p…
• DevSecOps tools for open source projects in JavaScript and Node.js (Snyk Blog)
  This post suggests some best practices, and discusses how maintainers and developers can adopt DevSecOps tools for open source projects to…
• Command injection: how it works, what are the risks, and how to prevent it (Snyk Blog)
  Command injection attacks—also known as operating system command injection attacks—exploit a programming flaw to execute system commands wi…
• Snyk CLI cheat sheet (Snyk Blog)
  Tips on how to get the most out of the Snyk CLI as a tool to test, monitor, and remediate known vulnerabilities in your applications
• How do we secure Infrastructure as Code tools? (Snyk Blog)
  Let’s take a look at some of the popular Infrastructure as Code tools and what security hardening measures you can apply at the code level…
• Turn the senior around: an alternative way to lead engineering teams (Snyk Blog)
  Most of the engineering managers I have met have assigned their senior engineers to lead all the critical features, but I would like to “tu…
• Cheatsheet: top 10 application security acronyms (Snyk Blog)
  Cheatsheet: top 10 application security acronyms
• 10 git aliases for a faster and productive git workflow (Snyk Blog)
  In this article, we’re featuring 10 git aliases that can help with a faster and more productive git workflow as an individual, or within a…
• Kernel privilege escalation: how Kubernetes container isolation impacts privilege escalation attacks (Snyk Blog)
  In this post, we will explore how Kubernetes container isolation impacts privilege escalation attacks. We will use common kernel exploitati…
• 10 Tips for getting that conference CFP accepted (Snyk Blog)
  Snyk's Liran Tal shares ten tips for getting that Call For Papers (CFP) proposal accepted into a conference.
• Improved security testing for git-based Gradle projects using lockfile (Snyk Blog)
  Over the past year, we have been working hard to improve our testing for Gradle projects imported from Git repositories by making it more r…
• Command line tools for containers—using Snyk with Buildah, Podman, and Skopeo (Snyk Blog)
  In this blog post, we’ll look at how the use of open standards allows Snyk’s container scanning to work with open source command line tools.
• How to detect the ExternalIP Kubernetes vulnerability in your Kubernetes configurations with Snyk (Snyk Blog)
  Snyk has added a new check to Snyk Infrastructure as Code (Snyk IaC) to check your Kubernetes deployment definitions and notify you if you…
• Snyk’s approach to container security research and relative importance (Snyk Blog)
  We’re pleased to announce a new feature that helps take some of the mystery out prioritizing and fixing container vulnerabilities: relative…
• Git checkout remote branch: how it works and when to use it (Snyk Blog)
  Let’s take a look at branches in git and what git checkout remote branch actually means.
• Go security: announcing enhanced security for Go applications (Snyk Blog)
  We’re happy to announce enhanced support for Go security in Snyk Open Source and Snyk Container, enabling development and security teams to…
• Security concerns of third-party JavaScript scripts (Snyk Blog)
  In this article, we look at security risks caused by marketing related scripts added to a website, such as A/B testing services, Google Ana…
• Serialization and deserialization in Java: explaining the Java deserialize vulnerability (Snyk Blog)
  Java serialization —and deserialization in particular — is known as “the gift that keeps on giving” because it has produced many security i…
• Blazing the trail for cloud native application security (Snyk Blog)
  2020 was an incredibly challenging year for all of us but with the dawn of a new year just over the horizon, it’s a great opportunity as an…
• Golang security: access restriction bypass vulnerability in JWT (Snyk Blog)
  Back in July, the Snyk security team was alerted about a potential security issue in the JWT package. This package provides a Go implementa…
• 2020 Q1 in review—JVM ecosystem report, DevSecOps insights, and more (Snyk Blog)
  Welcome to the first of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.
• 2020 Q2 in review—State of Open Source Security report, DevSecOps Hub, and more (Snyk Blog)
  Welcome to the second of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.
• 2020 Q3 in review—Snyk & DeepCode, Angular security best practices, and more (Snyk Blog)
  Welcome to the third of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.
• 2020 Q4 in review—iOS remote code execution, developer-first SAST, and more (Snyk Blog)
  Welcome to the fourth of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.
• Applying risk management to DevOps practices with Snyk & Datadog (Snyk Blog)
  In this post, we’ll look at some common software risks, how to measure security risks, and how organizations can use Datadog and Snyk to au…
• Securing your Kubernetes application development with Snyk and Tilt (Snyk Blog)
  Developing Kubernetes applications can be hard. This is where tools like Tilt come in.
• What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm (Snyk Blog)
  What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm
• Cache poisoning in popular open source packages (Snyk Blog)
  This blog post provides an introduction to web cache poisoning and demonstrates why open source maintainers should take this issue into acc…
• Prioritize fixes more efficiently with Reachable Vulnerabilities for GitHub (Snyk Blog)
  We are pleased to start the new year with the beta availability of Reachable Vulnerabilities for GitHub, providing development and security…
• Docker for Node.js developers: 5 things you need to know not to fail your security (Snyk Blog)
  Building your own Docker Node.js web applications may come with many security risks. So, how do we make security an essential part of Docke…
• Goodbye, 2020! Look out, 2021 (Snyk Blog)
  Snyk CEO Peter McKay looks back at Snyk's 2020 and talks about our opportunities in 2021.
• Kubernetes securityContext: Linux capabilities in Kubernetes (Snyk Blog)
  When we come to using the container runtime in Kubernetes, these controls are used by the Kubernetes control plane to define which capabili…
• Identify, prioritize, and fix vulnerabilities with Reachable Vulnerabilities for GitHub (Snyk Blog)
  In a perfect world, you want to do vulnerability remediation on all issues and end with zero vulnerabilities. But you may not be able to fi…
• Snyk and Rapid7 strengthen partnership to provide a holistic risk assessment solution for… (Snyk Blog)
  Since most organizations are taking steps to reduce the friction of application development, containers are rapidly becoming the de facto s…
• Learnings from our 2021 kickoff (Snyk Blog)
  An overview of Snyk's 2021 kickoff.
• What makes Verdaccio a successful project? (Snyk Blog)
  Learn about the Verdaccio, get open source project insights, deep dive into the best parts of the project, and get to know the maintainers…
• The State of Cloud Native Application Security survey—2021 (Snyk Blog)
  We’ve recently launched the 2021 survey and we want to hear from you!
• Go security cheatsheet: 8 security best practices for Go developers (Snyk Blog)
  In this installment of our cheatsheet series, we’re going to cover eight Go security best practices for Go developers.
• AWS vulnerability scanning using the Snyk integration (Snyk Blog)
  If you’re using the AWS suite of Kubernetes-related tools, you’ll be pleased to know that you use Snyk to scan directly into your workflows…
• Snyk kicks off Community Outreach Internship Program (Snyk Blog)
  Last fall, we made the decision to launch a Community Outreach Internship Program at Snyk. Like many across the globe, we at Snyk were trou…
• Java ecosystem survey 2021 (Snyk Blog)
  We're creating a comprehensive Java 2021 report that reflects the state of the JVM ecosystem. This post includes a summary of the JVM Ecosy…
• Extensibility and the Snyk API: our vision, commitment, and progress (Snyk Blog)
  We are excited each time we learn of a new use case, and are committed to improving the experience our customers have with the Snyk API.
• Snyk-Watcher: keep Snyk in sync (Snyk Blog)
  This is our newest blog series that highlights the different ways the Snyk API is leveraged by our customers. Snyk’s extensibility and API…
• Snyk IaC scanning enhancements include Azure and AWS infrastructure as code (Snyk Blog)
  In this post, we’ll review the IaC scanning tool, take a look at recent additions that have been made to it—including Azure, GCP, and AWS i…
• Shifting left security incident management with the Snyk & Opsgenie integration (Snyk Blog)
  We're excited to announce a new integration with Opsgenie, making it easier to further integrate security into existing incident management…
• Java configuration: how to prevent security misconfigurations (Snyk Blog)
  Security misconfiguration is part of the infamous OWASP top 10 vulnerability list and has a prominent spot on place 6.