Blog Archive

Compliance

Make Snyk notifications work for you

April 6, 2022

Container Security

Snyk Open Source adds C/C++ security scanning for unmanaged dependencies

April 5, 2022

Code Security

Exploring 3 types of directory traversal vulnerabilities in C/C++

April 4, 2022

Application Security

Introducing SUS: Snyk Ultimate Security

April 1, 2022

Vulnerability Insights

Browsers tormented by open roll vulnerability

April 1, 2022

Vulnerability Insights

Alert: LaughTilYouCry ransomware sabotages npm package (with puns)

April 1, 2022

Vulnerability Insights

Spring4Shell: The zero-day RCE in the Spring Framework explained

April 1, 2022

Vulnerability Insights

Spring4Shell: What we know about the Java RCE vulnerability

March 31, 2022

Open Source Security

Using the Snyk Vulnerability Database to find projects for The Big Fix

March 30, 2022

Application Security

Building a secure GraphQL API with Node.js

March 29, 2022

Application Security

How to do password hashing in Java applications the right way!

March 24, 2022

Application Security

How Snyk helps satisfy White House cybersecurity recommendations

March 23, 2022

Vulnerability Insights

dompdf security alert: RCE vulnerability found in popular PHP PDF library

March 18, 2022

Vulnerability Insights

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine

March 16, 2022

Application Security

Hiring a virtual CISO to help your security team

March 9, 2022

Container Security

Simplifying container security with Snyk’s security expertise

March 8, 2022

DevSecOps

Snyk and Bitbucket best practices cheat sheet

March 3, 2022

Container Security

Securing cloud infrastructure for PCI review

March 3, 2022

Application Security

Introduction to penetration testing for developers

March 2, 2022

DevSecOps

DevSecCon panel discussion: Which comes first, security or the app?

March 1, 2022

Open Source Security

Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters

February 28, 2022

Application Security

Even non-developers can fix security vulnerabilities in code at The Big Fix

February 23, 2022

Vulnerability Insights

Join The Big Fix: a 24-hour livestream dedicated to fixing security vulnerabilities in your projects

February 21, 2022

DevSecOps

A developer-centric approach to software

February 18, 2022