Blog Archive

Vulnerability Insights

Lessons learned from the Argo CD zero-day vulnerability (CVE-2022-24348)

February 10, 2022

Vulnerability Insights

Log4Shell remediation with Snyk by the numbers

February 5, 2022

Vulnerability Insights

Fun with ciphers in copycat Wordles

February 2, 2022

Vulnerability Insights

Analyzing the PwnKit local privilege escalation exploit

January 29, 2022

Vulnerability Insights

Stranger Danger: Live hack of how a Log4Shell exploit works

January 25, 2022

Vulnerability Insights

URL confusion vulnerabilities in the wild: Exploring parser inconsistencies

January 10, 2022

Vulnerability Insights

Open source maintainer pulls the plug on npm packages colors and faker, now what?

January 9, 2022

Vulnerability Insights

FTC highlights the importance of securing Log4j and software supply chain

January 7, 2022

Vulnerability Insights

CTF secrets revealed: TopLang challenge from SnykCon 2021 explained

January 6, 2022

Vulnerability Insights

Log4Shell webinar: What you need to know

January 5, 2022

Vulnerability Insights

New Log4j 2.17.1 fixes CVE-2021-44832 remote code execution (but it’s not as bad as it sounds)

December 29, 2021

Vulnerability Insights

Snyk makes it easier to fix Log4Shell with extended free scans

December 21, 2021

Vulnerability Insights

Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

December 18, 2021

Vulnerability Insights

Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI

December 18, 2021

Vulnerability Insights

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

December 17, 2021

Vulnerability Insights

Security in context: When is a CVE not a CVE?

December 17, 2021

Vulnerability Insights

Log4Shell in a nutshell (for non-developers & non-Java developers)

December 15, 2021

Vulnerability Insights

Log4Shell remediation cheat sheet

December 14, 2021

Vulnerability Insights

The Log4j vulnerability and its impact on software supply chain security

December 13, 2021

Vulnerability Insights

Find and fix the Log4Shell exploit fast with Snyk

December 13, 2021

Vulnerability Insights

Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.17.1

December 10, 2021

Vulnerability Insights

Java JSON deserialization problems with the Jackson ObjectMapper

December 1, 2021

Vulnerability Insights

How to prevent Trojan Source attacks with Snyk Code

November 17, 2021

Vulnerability Insights

How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint

November 10, 2021