Blog Archive

Application Security

Reporting AppSec risk up to your CISO

February 13, 2024

Cloud Security

Automatic source locations with Rego

February 12, 2024

Compliance

Creating SBOMs with the Snyk CLI

February 8, 2024

Container Security

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

Snyk Team

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

February 6, 2024

Code Security

10 GitHub Security Best Practices

February 5, 2024

Vulnerability Insights

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Container Security

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Container Security

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Container Security

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Container Security

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

Code Security

7 tips to become a successful bug bounty hunter

January 25, 2024

DevSecOps

The 4 best DevSecOps tools for a secure DevOps workflow

January 23, 2024

AI

3 tips from Snyk and Dynatrace’s AI security experts

January 22, 2024

Application Security

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

January 18, 2024

Open Source Security

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

ASPM

Snyk welcomes Helios, accelerating our ASPM vision with runtime insights

January 16, 2024

Engineering

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

AI

How to choose a security tool for your AI-generated code

January 9, 2024

Application Security

Build and deploy a Node.js security scanning API to Platformatic Cloud

January 5, 2024

Application Security

Krampus delivers an end-of-year Struts vulnerability

January 2, 2024