Blog Archive

Container Security

10 Docker Security Best Practices

January 8, 2025

Container Security

Snyk-generated SBOMs now include license details for the open source libraries in your projects

December 9, 2024

Open Source Security

Best practices for continuous vulnerability management

October 29, 2024

Application Security

Elevating views of risk: Holistic application risk management with Snyk

October 22, 2024

DevSecOps

Ensuring comprehensive security testing in DevOps pipelines

October 17, 2024

Container Security

Proactive AppSec continuous vulnerability management for developers and security teams

October 2, 2024

Container Security

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

September 27, 2024

Container Security

Abusing Ubuntu 24.04 features for root privilege escalation

September 9, 2024

Container Security

How to setup Deno Dev Container on GitHub Codespaces?

July 18, 2024

Container Security

How Mulesoft fosters a developer-first, shift-left culture with Snyk

April 30, 2024

Application Security

How to install Java on macOS

April 17, 2024

Container Security

Nine Docker pro tips for Node.js developers

April 11, 2024

Container Security

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

Vulnerability Insights

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Container Security

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Container Security

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Container Security

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Container Security

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

Engineering

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

AI

Snyk highlights AWS re:Invent 2023

December 14, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Container Security

Signing container images: Comparing Sigstore, Notary, and Docker Content Trust

September 26, 2023

Container Security

How Okta empowers devs to find & fix security issues with Snyk

August 25, 2023

Container Security

Using JLink to create smaller Docker images for your Spring Boot Java application

August 24, 2023