Blog Archive

Introducing The Secure Developer community

A serious security flaw in runC can result in root privilege escalation in Docker and Kubernetes

My first week at Snyk was at our All Hands Conference

Scanning Docker images for key binaries - going beyond package managers

Cloud infrastructure drift: The good, the bad, and the ugly

NumPy arbitrary code execution vulnerability

Launching .NET support for GitHub, Bitbucket and GitLab

How even quick Node.js async functions can block the Event-Loop

Severe security vulnerability in Bower’s zip archive extraction

Monitoring open source packages at runtime - now in open beta

Snyk CLI drops support for Node.js 4 (Argon)

Finding open source vulnerabilities within the Bitbucket workflow

Snyk - Your Next Career Move!

Snyk’s vulnerability database is no longer powering JFrog’s Xray

2018 Year in Review

Critical Arbitrary Code Execution Vulnerability Found in Kubernetes

The Secret To Building A Truly Successful Freemium Product and more, with Guy Podjarny

Report Shows the Equifax Breach was "Entirely Preventable"

Snyk highlighted on the ThoughtWorks Technology Radar

Codefresh + Snyk = ship fast and securely

Faster & improved tests for JavaScript lockfile based projects

A post-mortem of the malicious event-stream backdoor

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

Serverless Security: What’s left to protect?