Blog Archive

Code Security

How to update cURL

October 11, 2023

Open Source Security

Priorities from the OpenSSF Secure Open Source Software Summit 2023

October 4, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Application Security

How to implement SSL/TLS pinning in Node.js

August 29, 2023

Application Security

Streamline dependency updates with Mergify and Snyk

August 23, 2023

Application Security

.NET developers alert: Moq NuGET package exfiltrates user emails from git

August 9, 2023

Open Source Security

Snyk's 2023 State of Open Source Security: Supply chain security, AI, and more

July 26, 2023

Application Security

Finding and fixing insecure direct object references in Python

July 19, 2023

Code Security

Session management security: Best practices for protecting user sessions

July 11, 2023

Application Security

The importance of verifying webhook signatures

June 29, 2023

Application Security

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

June 28, 2023

Application Security

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

June 22, 2023

Open Source Security

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

June 21, 2023

Open Source Security

Snyk named a Leader, placed highest in Strategy category in The Forrester Wave: Software Composition Analysis (SCA), Q2 2023 report

June 13, 2023

Open Source Security

What can you do with an enriched SBOM? A parlay quickstart guide

June 7, 2023

Open Source Security

Introducing parlay, a tool for enriching SBOMs

June 7, 2023

Container Security

Top 8 penetration testing tools

May 25, 2023

Container Security

Improved risk assessment with EPSS scores in Snyk

May 22, 2023

Application Security

How to generate an SBOM for JavaScript and Node.js applications

May 22, 2023

Supply Chain Security

Snyk and ServiceNow collaborate on new SBOM solution

May 16, 2023

Container Security

Lessons from OpenSSL vulnerabilities part 2: Finding and fixing supply chain vulnerabilities

April 26, 2023

Supply Chain Security

Lessons from OpenSSL vulnerabilities part 1: Preparing your supply chain for the next critical vulnerability

April 19, 2023

Application Security

SnykLaunch April '23: C/C++ expansion, cloud and IaC updates, custom container security, new integrations, and more

April 4, 2023

Application Security

Snyk brings developer-first AppSec approach to C/C++

April 4, 2023