Snyk Blog · News

News listings from Snyk Blog on TechiSeek. 883 public listings.

• SolarWinds Orion Security Breach: A Shift In The Software Supply Chain Paradigm (Snyk Blog)
  in this article, we'll walk through the lessons learned from SolarWinds Orion security breach.
• Snyk’s new vulnerability cards - fix issues fast with a new look and feel (Snyk Blog)
  We're excited to announce that we’ve redesigned Snyk's issue cards to significantly improve its usability and value. It’s more than a fresh…
• 10 Kubernetes Security Context settings you should understand (Snyk Blog)
  In this cheatsheet, we will take a look at the various `securityContext` settings, explore what they mean and how you should use them.
• Our Journey to Today (Snyk Blog)
  Today we came a step closer towards our ultimate vision - to empower every one of the world’s 27 million developers to develop fast while s…
• Snyk expands into Asia Pacific Japan (Snyk Blog)
  At the beginning of 2021, I noted that Snyk was ready to soar. And soar we have…the rocket ship’s next stop? Asia Pacific and Japan (APJ).
• How I was hacking docker containers by exploiting ImageMagick vulnerabilities (Snyk Blog)
  In this article, I’ll take you through a step-by-step process of container hacking, in which we will exploit a Node.js-based web applicatio…
• Solving Java security issues in my Spring MVC application (Snyk Blog)
  For this article, I created a Spring MVC application with JSP web pages that runs on a tomcat server. Although the code works perfectly, I…
• Docker Hub authentication: Is 2021 the year you enable 2FA on Docker Hub? (Snyk Blog)
  In October 2019, in order to improve the Docker Hub authentication mechanism, Docker rolled out a beta release of two-factor authentication…
• Defining developer-first container security (Snyk Blog)
  We're excited to announce our ability to automate fix PRs for containers, following on to our recent announcement of elevating Dockerfiles…
• Automate container security with Dockerfile pull requests (Snyk Blog)
  We’re happy to share that we are extending Snyk Container by helping you automatically fix issues in your Dockerfile to keep an up-to-date…
• Backstage integration with the Snyk API (Snyk Blog)
  Let’s take a look at installing Backstage and the Snyk plugin!
• Top 10 DevOps Tools (Snyk Blog)
  Learn more about 10 DevOps tools that enable fast and efficient software development in complex projects involving multiple teams and devel…
• Developer driven workflows: Dockerfile image scanning, prioritization, and remediation (Snyk Blog)
  In this article, you will learn how to identify, prioritize and fix issues in your application’s container images using various tools and g…
• SQL injection cheat sheet: 8 best practices to prevent SQL injection attacks (Snyk Blog)
  SQL injection cheat sheet: 8 best practices to prevent SQL injection attacks
• Preventing YAML parsing vulnerabilities with snakeyaml in Java (Snyk Blog)
  The outdated version of snakeyaml contains a Denial of Service vulnerability. We highly recommend that you update snakeyaml to version 1.26…
• Secure coding with Snyk Code: Ignore functionality with a twist (Snyk Blog)
  Snyk Code provides the ability to ignore suggestions. Learn about our take on this functionality using intermediate representation. We thin…
• Application security automation for GitHub repositories with Snyk (Snyk Blog)
  We started to investigate alternative workflows, specifically around application security automation, and quickly solved our scaling challe…
• Scanning Harbor registry images for vulnerabilities with Snyk (Snyk Blog)
  Snyk Container offers support for scanning container images stored in the popular open source container registry, Harbor. Learn how to use…
• Scanning Red Hat Quay registry images for vulnerabilities with Snyk (Snyk Blog)
  We’re excited to share that you can now scan container images stored in Red Hat’s Quay container registry and their hosted Quay.io service…
• Snyk chats with Shutterstock about building a DevSecOps culture (Snyk Blog)
  Buying security tooling is easy, but changing company culture is hard. Learn how Shutterstock was able to adopt a security mindset from the…
• 5 ways to prevent code injection in JavaScript and Node.js (Snyk Blog)
  Learn some best practices for keeping your Node.js and JavaScript projects safe from code injection attacks.
• View and report on all of your Snyk Infrastructure as Code configuration issues (Snyk Blog)
  View a complete picture of the open issues across your application, covering vulnerabilities from open source libraries and container image…
• Secure coding with Snyk’s new JetBrains IDE plugin (Snyk Blog)
  We’re pleased to announce our new plugin for JetBrains IDEs, making it easier for developers to find and fix security issues as they code!
• How to fix Java security issues while coding in IntelliJ IDEA (Snyk Blog)
  Learn how to use the Snyk Vulnerability Scanner plugin for IntelliJ IDEA to make it easy to find and fix Java security issues earlier in th…
• Securing cloud native applications: ActiveCampaign’s VP, Information Security provides perspective (Snyk Blog)
  Simon Maple (VP of Developer Relations & Community at Snyk) and Chaim Mazal (VP, Information Security at ActiveCampaign) discuss the changi…
• Python language support now beta in Snyk Code (Snyk Blog)
  Snyk Code, the AI-based static application security testing (SAST) tool, now offers Python as a supported development language (beta). Snyk…
• Snyk @ Snyk: Enabling Kubernetes RBAC for Snyk’s Developers (Snyk Blog)
  Snyk @ Snyk: Enabling Kubernetes RBAC for Snyk’s Developers
• Code Dx 5.3 integrates with Snyk for comprehensive vulnerability management (Snyk Blog)
  Code Dx 5.3 now includes a connector with Snyk, giving customers visibility to open source dependencies, license issues, and container vuln…
• Snyk Maven plugin: Integrated security vulnerability scanning for developers (Snyk Blog)
  the Snyk Maven plugin so you can now scan your application for security vulnerabilities in third-party libraries as part of your build cycl…
• Announcing the Snyk Team plan: Secure development for teams (Snyk Blog)
  Announcing the Snyk Team product plan, designed to help development teams build secure applications faster.
• Snyk IaC public beta introduces Terraform plan analysis (Snyk Blog)
  Snyk Infrastructure as Code beta helps you perform Terraform plan analysis for security vulnerabilities before applying your changes.
• Celebrating four years of developer-first integrations at Atlassian Team ‘21 (Snyk Blog)
  Snyk is celebrating our 4-year partnership with Atlassian at Atlassian Team ‘21 with a big announcement
• Secure Elixir development with Snyk (Snyk Blog)
  Announcing Snyk support for secure Elixir development. Snyk enables development and security teams to easily find, prioritize and fix vulne…
• Why developer-first SAST tools are the future of code security (Snyk Blog)
  The future of code security depends on SAST tools that are fast, accurate, and developer-first. Additionally, they need to offer recommende…
• Performance in OPA Rego: Bottom-up and top-down (Snyk Blog)
  A look at how Rego evaluation works, and how it affects performance. With Rego, there are two important strategies: bottom-up and top-down.
• Snyk & Intuit roundtable: Breaking silos, engaging with security and developer communities (Snyk Blog)
  During our roundtable discussion with Intuit, we tackled the question, "How can we make security appealing to developers?"
• How AppSec has evolved in 2021: Reddit’s perspective (Snyk Blog)
  As organizations continue to rely on software for core business processes, application security (AppSec) is an ever-critical consideration.
• GitHub Security Code Scanning: Secure your open source dependencies (Snyk Blog)
  Snyk Open Source support for GitHub Security Code Scanning lets you automatically scan your open source dependencies for security vulnerabi…
• Snyk uncovers malicious code activities in open source supply chain security on the npm registry (Snyk Blog)
  In a recent npm security research activity, Snyk uncovered a total of 8 npm packages that matched a specific malicious code vector of attac…
• Snyk Code is now available for free (Snyk Blog)
  We’re excited to announce that Snyk Code is now available as part of our Free plan, offering 100 free vulnerability scans.
• SuiteCRM: PHAR deserialization vulnerability to code execution (Snyk Blog)
  This advisory details a PHAR deserialization vulnerability that exists in SuiteCRM which could be leveraged by an authenticated administrat…
• Trend Micro launches Cloud One Open Source Security powered by Snyk (Snyk Blog)
  Trend Micro Launches its Cloud One Open Source Security powered by Snyk. Learn more about what to expect from this expanded partnership.
• Snyk streamlines procurement with AWS Marketplace Solution Provider Private Offers (SPPO) (Snyk Blog)
  Snyk is available to purchase on the AWS Marketplace through a variety of mechanisms including private offers, either directly, or through…
• Joining forces with FossID to extend developer-first security to C/C++ applications (Snyk Blog)
  We’re excited to announce the acquisition of FossID, extending Snyk’s developer-first security capabilities with deeper C/C++ support and e…
• Prevent cloud misconfigurations in HashiCorp Terraform with Snyk IaC (Snyk Blog)
  With Snyk IaC, you can get immediate guidance on security configurations as you write, and scan your Terraform plans in your deployment pip…
• Misconfigurations, known unpatched vulnerabilities, and Cloud Native Application Security (Snyk Blog)
  In our recent State of Cloud Native Application Security report, we found that 69% of respondents had a misconfiguration or known unpatched…
• Snyker Spotlight: Jeff Yoshimura on his Asian American heritage & AAPI Month (Snyk Blog)
  In honor of Asian American Pacific Islander (AAPI) Heritage Month, Jeff Yoshimura, Chief Marketing and Customer Experience Officer at Snyk,…
• Testing for PHP Composer security vulnerabilities with Snyk (Snyk Blog)
  While PHP Composer makes app development faster, it does abstract away a level of control and visibility. So while it makes coding easier,…
• Introducing Snyk Preview: Early access to Snyk features (Snyk Blog)
  We’re excited to announce Snyk Preview — a new way for our users to easily get a first taste of upcoming features before they are generally…
• Continuous dependency updates: Improving processes by front-loading pain (Snyk Blog)
  Updating dependencies is a lot of work! Learn how a DevOps-focused team from Manifold put best practices in place for continuous dependency…