Blog Archive

Open Source Security

New language-specific Snyk Top 10 for open source vulnerabilities

March 15, 2023

Application Security

Snyk in 30: Developer-first security democast

March 2, 2023

Engineering

Embrace your next cybersecurity career with The Big Fix

February 22, 2023

Open Source Security

The dangers of setattr: Avoiding Mass Assignment vulnerabilities in Python

February 15, 2023

Compliance

When software isn’t a “supply”

February 15, 2023

Application Security

Announcing The Big Fix: Secure all software

February 14, 2023

Application Security

4 application security bad habits to ditch in 2023 (and best practices to adopt instead)

February 2, 2023

Open Source Security

Snyk enhances ServiceNow with comprehensive insights into vulnerabilities in open source software

January 24, 2023

Open Source Security

Three ways Snyk made software supply chains more secure in 2022

January 12, 2023

Open Source Security

OSPO security evolution: The Kübler-Ross Model of open source

January 12, 2023

Open Source Security

5 "no experience needed" tips for building secure applications

December 27, 2022

Open Source Security

Exploring the Spring Security authorization bypass (CVE-2022-31692)

December 16, 2022

Open Source Security

Snyk in 30: Open source security for Atlassian Bitbucket Cloud

December 15, 2022

Vulnerability Insights

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

December 14, 2022

Open Source Security

How Atlassian used Snyk to solve Log4Shell

November 16, 2022

Open Source Security

How community participation can enhance your development career

November 15, 2022

Open Source Security

Secure Python URL validation

November 4, 2022

Vulnerability Insights

Update: OpenSSL high severity vulnerabilities

November 3, 2022

Open Source Security

How to create SBOMs in Java with Maven and Gradle

October 31, 2022

Vulnerability Insights

New OpenSSL critical vulnerability: What you need to know

October 31, 2022

Open Source Security

Snyk’s new native integration with Bitbucket Cloud emphasizes dev-first security

October 25, 2022

Vulnerability Insights

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

October 18, 2022

Open Source Security

How to contribute to open source projects

October 17, 2022

Open Source Security

Security lessons with a Snyk Ambassador

October 11, 2022