Blog Archive

AI

Copilot amplifies insecure codebases by replicating vulnerabilities in your projects

February 22, 2024

DevSecOps

How to build a modern DevSecOps culture: Lessons from Jaguar Land Rover and Asda

February 21, 2024

Code Security

Preventing server-side request forgery in Node.js applications

February 20, 2024

Application Security

Preventing SQL injection attacks in Node.js

February 20, 2024

With Love, Your Applications

February 14, 2024

AI

Snyk & Atlassian: How to embed security in AI-assisted software development

February 14, 2024

Application Security

Reporting AppSec risk up to your CISO

February 13, 2024

Cloud Security

Automatic source locations with Rego

February 12, 2024

Compliance

Creating SBOMs with the Snyk CLI

February 8, 2024

Container Security

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

Snyk Team

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

February 6, 2024

Code Security

10 GitHub Security Best Practices

February 5, 2024

Vulnerability Insights

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Container Security

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Container Security

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Container Security

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Container Security

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

Code Security

7 tips to become a successful bug bounty hunter

January 25, 2024

AI

3 tips from Snyk and Dynatrace’s AI security experts

January 22, 2024

Application Security

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

January 18, 2024

Open Source Security

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024