Blog Archive

Code Security

10 GitHub Security Best Practices

February 5, 2024

Code Security

7 tips to become a successful bug bounty hunter

January 25, 2024

DevSecOps

The 4 best DevSecOps tools for a secure DevOps workflow

January 23, 2024

Open Source Security

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

Engineering

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

Application Security

Krampus delivers an end-of-year Struts vulnerability

January 2, 2024

Code Security

Command injection in Python: examples and prevention

December 21, 2023

AI

Is your team on the *security* naughty or nice list?

December 20, 2023

Application Security

Handling security vulnerabilities in Spring Boot

November 29, 2023

Application Security

Real-time threat protection with Snyk and SentinelOne

November 9, 2023

Open Source Security

Dependency injection in Python

October 31, 2023

Engineering

The art of conditional rendering: Tips and tricks for React and Next.js developers

October 30, 2023

Code Security

How to update cURL

October 11, 2023

Open Source Security

Priorities from the OpenSSF Secure Open Source Software Summit 2023

October 4, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Application Security

How to implement SSL/TLS pinning in Node.js

August 29, 2023

Application Security

Streamline dependency updates with Mergify and Snyk

August 23, 2023

Application Security

.NET developers alert: Moq NuGET package exfiltrates user emails from git

August 9, 2023

Open Source Security

Snyk's 2023 State of Open Source Security: Supply chain security, AI, and more

July 26, 2023

Application Security

Finding and fixing insecure direct object references in Python

July 19, 2023

Code Security

Session management security: Best practices for protecting user sessions

July 11, 2023

Application Security

The importance of verifying webhook signatures

June 29, 2023

Application Security

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

June 28, 2023

Application Security

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

June 22, 2023