Blog Archive

Vulnerability Insights

Supply chain security incident at CircleCI: Rotate your secrets

January 6, 2023

Application Security

Creating AWS security efficiencies in IT

January 4, 2023

Application Security

You should be using HTTP Strict Transport Security (HSTS) headers in your Node.js server

December 29, 2022

Engineering

How to build a secure API gateway in Node.js

December 28, 2022

Open Source Security

5 "no experience needed" tips for building secure applications

December 27, 2022

Code Security

Cloud security updates you need to know from re:Invent 2022

December 21, 2022

Container Security

Kubernetes network policy best practices

December 21, 2022

Application Security

Panel recap: Breaking Bad Security Habits with Corey Quinn

December 20, 2022

Application Security

Building an application security battle plan: Home Alone edition

December 20, 2022

Snyk Team

Cloud Security Podcast awarded SANS Podcast of the Year

December 19, 2022

Open Source Security

Exploring the Spring Security authorization bypass (CVE-2022-31692)

December 15, 2022

Open Source Security

Snyk in 30: Open source security for Atlassian Bitbucket Cloud

December 15, 2022

DevSecOps

Top takeaways from re:Invent 2022

December 14, 2022

Vulnerability Insights

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

December 13, 2022

IaC Security

Azure Bicep security fundamentals

December 13, 2022

Application Security

AWS re:Invent 2022: How Neiman Marcus transitioned to developer-first security

December 12, 2022

Code Security

Using Snyk reporting for data-driven security

December 8, 2022

Engineering

How to handle Node.js file uploads with Fastify

December 8, 2022

Code Security

5 best practices for React with TypeScript security

December 7, 2022

Compliance

Why tool consolidation matters for developer security

December 6, 2022

Application Security

How to verify and secure your Mastodon account

December 5, 2022

DevSecOps

3 tips for effective developer security training

December 1, 2022

Vulnerability Insights

Code injection vulnerabilities (CVSSv3 5.8) found in Snyk CLI and IDE plugins

November 29, 2022

Compliance

Snyk expands in Asia-Pacific (APAC) with new datacenter in Sydney, Australia

November 29, 2022