Blog Archive

Developer security resolutions for 2022

Log4Shell webinar: What you need to know

Securing a DevOps pipeline with Snyk, Bitbucket, and AWS

Checking Terraform IaC security in CI/CD with Regula and Bitbucket Pipelines [Tutorial]

New Log4j 2.17.1 fixes CVE-2021-44832 remote code execution (but it’s not as bad as it sounds)

It takes a community: Responding to open source criticism post-Log4Shell

Snyk IaC in 2021: Leading infrastructure as code security for developers

Snyk Container in 2021: Shifting container security all the way left

Snyk Code in 2021: Redefining SAST

Snyk Open Source in 2021: A year of innovation

Snyk makes it easier to fix Log4Shell with extended free scans

Why you should implement an automated code review process

Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

Security in context: When is a CVE not a CVE?

Log4Shell in a nutshell (for non-developers & non-Java developers)

Log4Shell remediation cheat sheet

Build securely with Snyk and GKE Autopilot

The Log4j vulnerability and its impact on software supply chain security

Find and fix the Log4Shell exploit fast with Snyk

Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.17.1

Find and fix vulnerabilities in your CI/CD pipeline with Snyk and Harness

Responsible disclosure: CodeCov CEO & CTO share learnings from the breach