Skip to main content
Snyk Blog

Blog Archive

Narrow your search

Topic

Audience

Reset filters

Showing 1 - 20 of 20 posts

feature-snyk-platform-learn-getting-snyk-setup

Container Security

Abusing Ubuntu 24.04 features for root privilege escalation

September 9, 2024

feature-snyk-platform-learn-getting-snyk-setup

AI

Agent hijacking: The true impact of prompt injection attacks

August 28, 2024

feature-snyk-platform-learn-using-snyk-with-CI-CD

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

August 14, 2024

blog-feature-open-source-security

Code Security

Repo Jacking: The Great Source-code Swindle

July 25, 2024

wordpress-sync/blog-feature-toolkit

Application Security

Breaking caches and bypassing Istio RBAC with HTTP response header injection

June 20, 2024

feature-getting-snyk-setup

Open Source Security

Call for action: Exploring vulnerabilities in Github Actions

June 6, 2024

feature-leaky-vessels-deep-dive

Container Security

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

feature-leaky-vessels-2024-21626

Container Security

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

feature-leaky-vessels-2024-23651

Container Security

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

feature-leaky-vessels-2024-23652

Container Security

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

feature-leaky-vessels-2024-23653

Container Security

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

feature-insights-context

Application Security

SocketSleuth: Improving security testing for WebSocket applications

September 6, 2023

blog-feature-pypi-spoof

Application Security

Gitpod remote code execution 0-day vulnerability via WebSockets

February 27, 2023

wordpress-sync/feature-openssl-blue

Vulnerability Insights

Breaking down the ’critical’ OpenSSL vulnerability

November 4, 2022

Vulnerability Insights

Phony PyPi package imitates known developer

October 5, 2022

wordpress-sync/blog-hero-pypi-malware-discord

Vulnerability Insights

Snyk finds PyPi malware that steals Discord and Roblox credential and payment info

August 16, 2022

wordpress-sync/blog-banner-google-play

Vulnerability Insights

Mitigating and remediating intent-based Android security vulnerabilities

June 2, 2021

Vulnerability Insights

Hunting intent-based Android security vulnerabilities with Snyk Code

May 27, 2021

Vulnerability Insights

Deep dive into Visual Studio Code extension security vulnerabilities

May 26, 2021

Vulnerability Insights

Exploring intent-based Android security vulnerabilities on Google Play

May 18, 2021

1

Subscribe to our newsletter

Get all latest content from Snyk directly to your mailbox.