Blog Archive

Java logging: what should you log and what not?

GitHub Actions to securely publish npm packages

Enterprise security best practices for managing vulnerabilities at scale

How we promote inclusivity in our job descriptions

Node.js security: lessons from the Node.js Security Working Group in triaging vulnerabilities

Developing secure software: how to implement the OWASP top 10 Proactive Controls

Privileged Docker containers—do you really need them?

Tips to scale your DevSecOps organization from Gene Kim and Guy Podjarny

The new, improved Snyk Container CLI

How Atlassian CISO Adrian Ludwig built a world-class product security team

Key approaches for effective security risk management & prioritization

Regular Expression Denial of Service (REDoS) in UAParser.js

Snyk user community...3,2,1...LAUNCH!

Gradle dependencies: scanning with new Snyk Gradle plugin

Vulnerability remediation process: reducing your vulnerability backlog with Snyk’s automatic backlog PRs

SnykCon Day Two wrap-up: Integrations and partnerships galore & session highlights

SnykCon Day One wrap-up: Snyk Code, carbon neutrality & session highlights

Announcing developer-first SAST with Snyk Code

SourMint malicious SDK research write up

Happiness in the year of COVID-19

SourMint: iOS remote code execution, Android findings, and community response

OWASP Top 10 Vulnerabilities

JHipster security scanning with Snyk

Snyk and Secure Code Warrior: adding more context to GitHub code scanning alerts