Blog Archive

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

November 1, 2024

Best Practices for Continuous Vulnerability Management

October 29, 2024

Elevating Views of Risk: Holistic Application Risk Management with Snyk

October 22, 2024

Snyk announces commitment to Service for America, bringing security education access to all

October 17, 2024

Ensuring comprehensive security testing in DevOps pipelines

October 17, 2024

SnykLaunch Oct 2024: Enhanced PR experience, extended visibility, AI-powered security, holistic risk management

October 8, 2024

The mysterious supply chain concern of string-width-cjs npm package

October 3, 2024

Proactive AppSec continuous vulnerability management for developers and security teams

October 2, 2024

Going beyond reachability to prioritize what matters most

October 1, 2024

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

September 27, 2024

How to prevent log injection vulnerability in JavaScript and Node.js applications

September 26, 2024

Abusing Ubuntu 24.04 features for root privilege escalation

September 9, 2024

How Axel Springer National Media and Tech achieved continuous security with Snyk

September 3, 2024

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

August 29, 2024

Vulnerabilities in NodeJS C/C++ add-on extensions

August 14, 2024

Repo Jacking: The Great Source-code Swindle

July 25, 2024

How to secure a REST API?

June 27, 2024

Polyfill supply chain attack embeds malware in JavaScript CDN assets

June 26, 2024

Call for action: Exploring vulnerabilities in Github Actions

June 6, 2024

Preventing broken access control in express Node.js applications

May 22, 2024

How to secure Python Flask applications

May 21, 2024