Blog Archive

Vulnerability Insights

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

December 17, 2021

Vulnerability Insights

Security in context: When is a CVE not a CVE?

December 17, 2021

Vulnerability Insights

Log4Shell in a nutshell (for non-developers & non-Java developers)

December 15, 2021

Vulnerability Insights

Log4Shell remediation cheat sheet

December 14, 2021

Vulnerability Insights

The Log4j vulnerability and its impact on software supply chain security

December 13, 2021

Vulnerability Insights

Find and fix the Log4Shell exploit fast with Snyk

December 13, 2021

Vulnerability Insights

Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.17.1

December 10, 2021

Application Security

Responsible disclosure: CodeCov CEO & CTO share learnings from the breach

December 9, 2021

Container Security

Snyk achieves AWS Security Competency status

November 30, 2021

Vulnerability Insights

How to prevent Trojan Source attacks with Snyk Code

November 17, 2021

DevSecOps

Proactively fixing vulnerabilities to maintain Java security and project hygiene with Snyk

November 16, 2021

Application Security

AppSec during hypergrowth: Empower your developers to overcome the tech talent shortage

November 16, 2021

Vulnerability Insights

How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint

November 10, 2021

Code Security

How Snyk Code prioritizes vulnerabilities using their Priority Score

November 9, 2021

Open Source Security

How Datto made developer-first security a reality with Snyk

November 9, 2021

Vulnerability Insights

Exploring extensions of dependency confusion attacks via npm package aliasing

November 4, 2021

Vulnerability Insights

JavaScript type confusion: Bypassed input validation (and how to remediate)

November 3, 2021

Code Security

How MongoDB built a successful security champions program

November 2, 2021

IaC Security

What are security misconfigurations and how can you prevent them?

November 1, 2021

Code Security

Snyk Code adds language support for Apex, API, GraphQL security

October 28, 2021

Code Security

Providing Comprehensive Application Security from Code to Production: New Snyk and Hdiv Security Partnership

October 26, 2021

Code Security

Security Horror Story: Accidentally exposing PII data

October 25, 2021

Code Security

New Java 17 features for improved security and serialization

October 21, 2021

Application Security

Mapping vulnerabilities to microservices with Snyk and OpsLevel

October 21, 2021