Blog Archive

With Love, Your Applications

February 14, 2024

Snyk & Atlassian: How to embed security in AI-assisted software development

February 14, 2024

Reporting AppSec risk up to your CISO

February 13, 2024

Automatic source locations with Rego

February 12, 2024

Creating SBOMs with the Snyk CLI

February 8, 2024

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

February 6, 2024

10 GitHub Security Best Practices

February 5, 2024

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

7 tips to become a successful bug bounty hunter

January 25, 2024

3 tips from Snyk and Dynatrace’s AI security experts

January 22, 2024

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

January 18, 2024

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

Snyk welcomes Helios, accelerating our ASPM vision with runtime insights

January 16, 2024

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

How to choose a security tool for your AI-generated code

January 9, 2024

Build and deploy a Node.js security scanning API to Platformatic Cloud

January 5, 2024