Blog Archive

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

February 6, 2024

10 GitHub Security Best Practices

February 5, 2024

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

7 tips to become a successful bug bounty hunter

January 25, 2024

3 tips from Snyk and Dynatrace’s AI security experts

January 22, 2024

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

January 18, 2024

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

Snyk welcomes Helios, accelerating our ASPM vision with runtime insights

January 16, 2024

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

How to choose a security tool for your AI-generated code

January 9, 2024

Build and deploy a Node.js security scanning API to Platformatic Cloud

January 5, 2024

Krampus delivers an end-of-year Struts vulnerability

January 2, 2024

Kroger’s approach to supply chain security

January 2, 2024

3 tips for rebuilding a Docker image faster (and save CI seconds!)

December 28, 2023

How to prevent open redirect vulnerabilities in Laravel

December 27, 2023

Command injection in Python: examples and prevention

December 21, 2023

Is your team on the *security* naughty or nice list?

December 20, 2023