Blog Archive

Application Security

The XZ backdoor CVE-2024-3094

March 31, 2024

Open Source Security

Securing your SBOM on Google Cloud

March 28, 2024

Code Security

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

March 12, 2024

DevSecOps

How REI built a DevSecOps culture and how Snyk helped

February 27, 2024

Code Security

Preventing server-side request forgery in Node.js applications

February 20, 2024

Code Security

10 GitHub Security Best Practices

February 5, 2024

Code Security

7 tips to become a successful bug bounty hunter

January 25, 2024

DevSecOps

The 4 best DevSecOps tools for a secure DevOps workflow

January 23, 2024

Open Source Security

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

Engineering

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

Application Security

Krampus delivers an end-of-year Struts vulnerability

January 2, 2024

Code Security

Command injection in Python: examples and prevention

December 21, 2023

AI

Is your team on the *security* naughty or nice list?

December 20, 2023

Application Security

Handling security vulnerabilities in Spring Boot

November 29, 2023

Application Security

Real-time threat protection with Snyk and SentinelOne

November 9, 2023

Open Source Security

Dependency injection in Python

October 31, 2023

Engineering

The art of conditional rendering: Tips and tricks for React and Next.js developers

October 30, 2023

Code Security

How to update cURL

October 11, 2023

Open Source Security

Priorities from the OpenSSF Secure Open Source Software Summit 2023

October 4, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Application Security

How to implement SSL/TLS pinning in Node.js

August 29, 2023

Application Security

Streamline dependency updates with Mergify and Snyk

August 23, 2023

Application Security

.NET developers alert: Moq NuGET package exfiltrates user emails from git

August 9, 2023

Open Source Security

Snyk's 2023 State of Open Source Security: Supply chain security, AI, and more

July 26, 2023