Blog Archive

Open Source Security

New O’Reilly Book: Securing Open Source Libraries by Guy Podjarny

July 2, 2019

Vulnerability Insights

Yet another malicious package found in npm, targeting cryptocurrency wallets

June 17, 2019

DevSecOps

Best practices for secrets management in serverless applications

June 13, 2019

Cloud Security

4 benefits of visualizing your cloud infrastructure

June 11, 2019

What’s new in Snyk?

June 10, 2019

Application Security

npm passes the 1 millionth package milestone! What can we learn?

June 4, 2019

DevSecOps

10 Serverless security best practices

May 31, 2019

Vulnerability Insights

Java Top 10 Security Vulnerabilities Disclosed [2019 - List]

May 27, 2019

Snyk Team

Snyk Voted Next European Unicorn for B2B Enterprise

May 22, 2019

Open Source Security

Dependency Health—assessing package risk with Snyk

May 16, 2019

Application Security

Scoring security vulnerabilities 101: Introducing CVSS for CVEs

May 16, 2019

Vulnerability Insights

CRLF injection found in popular Python dependency, urllib3

May 15, 2019

Open Source Security

JVM Ecosystem Survey 2019

May 14, 2019

Code Security

Understanding Amazon S3 security and compliance on AWS

May 10, 2019

Vulnerability Insights

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

May 6, 2019

IaC Security

8 Azure Repos Security Best Practices

May 6, 2019

IaC Security

Never store credentials as code/config in Azure Repos

May 6, 2019

IaC Security

Remove sensitive data in your files and Azure Repos history

May 6, 2019

IaC Security

Add security testing to pull requests in Azure Repos

May 6, 2019

IaC Security

Tightly control access to your Azure Repos

May 6, 2019

IaC Security

Add a SECURITY.md file to your Azure Repos

May 6, 2019

IaC Security

Provide granular permissions and groups for users in Azure Repos

May 6, 2019

IaC Security

Use Personal Access Tokens with Azure Repos

May 6, 2019

IaC Security

Rotate Azure Repos SSH keys and personal access tokens

May 6, 2019