Blog Archive

AI

SnykLaunch Oct 2024: Enhanced PR experience, extended visibility, AI-powered security, holistic risk management

October 8, 2024

Code Security

The mysterious supply chain concern of string-width-cjs npm package

October 3, 2024

Container Security

Proactive AppSec continuous vulnerability management for developers and security teams

October 2, 2024

Open Source Security

Going beyond reachability to prioritize what matters most

October 1, 2024

Container Security

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

September 27, 2024

Application Security

How to prevent log injection vulnerability in JavaScript and Node.js applications

September 26, 2024

Customer

How Axel Springer National Media and Tech achieved continuous security with Snyk

September 3, 2024

Application Security

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

August 29, 2024

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

August 14, 2024

Application Security

How to secure a REST API?

June 27, 2024

Application Security

Polyfill supply chain attack embeds malware in JavaScript CDN assets

June 26, 2024

Code Security

Preventing broken access control in express Node.js applications

May 22, 2024

Application Security

How to secure Python Flask applications

May 21, 2024

Application Security

Symmetric vs. asymmetric encryption: Practical Python examples

May 15, 2024

Code Security

The ultimate guide to creating a secure Python package

May 8, 2024

Container Security

How Mulesoft fosters a developer-first, shift-left culture with Snyk

April 30, 2024

Engineering

Building an npm package compatible with ESM and CJS in 2024

April 18, 2024

Application Security

How to install Java on macOS

April 17, 2024

Engineering

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

April 8, 2024

Application Security

The XZ backdoor CVE-2024-3094

March 31, 2024

Open Source Security

Securing your SBOM on Google Cloud

March 28, 2024

Code Security

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

March 12, 2024

DevSecOps

How REI built a DevSecOps culture and how Snyk helped

February 27, 2024

Code Security

Preventing server-side request forgery in Node.js applications

February 20, 2024