Blog Archive

Application Security

Finding and fixing insecure direct object references in Python

July 19, 2023

Code Security

Session management security: Best practices for protecting user sessions

July 11, 2023

Application Security

The importance of verifying webhook signatures

June 29, 2023

Application Security

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

June 28, 2023

Application Security

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

June 22, 2023

Open Source Security

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

June 21, 2023

Open Source Security

Snyk named a Leader, placed highest in Strategy category in The Forrester Wave: Software Composition Analysis (SCA), Q2 2023 report

June 13, 2023

Open Source Security

What can you do with an enriched SBOM? A parlay quickstart guide

June 7, 2023

Open Source Security

Introducing parlay, a tool for enriching SBOMs

June 7, 2023

Container Security

Top 8 penetration testing tools

May 25, 2023

Container Security

Improved risk assessment with EPSS scores in Snyk

May 22, 2023

Application Security

How to generate an SBOM for JavaScript and Node.js applications

May 22, 2023

Supply Chain Security

Snyk and ServiceNow collaborate on new SBOM solution

May 16, 2023

Container Security

Lessons from OpenSSL vulnerabilities part 2: Finding and fixing supply chain vulnerabilities

April 26, 2023

Supply Chain Security

Lessons from OpenSSL vulnerabilities part 1: Preparing your supply chain for the next critical vulnerability

April 19, 2023

Application Security

SnykLaunch April '23: C/C++ expansion, cloud and IaC updates, custom container security, new integrations, and more

April 4, 2023

Application Security

Snyk brings developer-first AppSec approach to C/C++

April 4, 2023

Application Security

Snyk achieves Red Hat Vulnerability Scanner Certification

April 3, 2023

Application Security

Introducing the Snyk Partner Solutions Directory for discovering Snyk technology integrations

April 3, 2023

Application Security

Securing the web (forward)

March 27, 2023

Open Source Security

The rising trend of malicious packages in open source ecosystems

March 23, 2023

Application Security

PulseMeter Report: Software supply chains

March 21, 2023

Cloud Security

Securing the digital future: Reviewing the Biden-Harris administration's National Cybersecurity Strategy

March 20, 2023

Open Source Security

The Docker project turns 10! Looking back at a decade of containers

March 17, 2023