Blog Archiv

Schwachstellen-Insights

Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

18. Dezember 2021

Schwachstellen-Insights

Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI

18. Dezember 2021

Schwachstellen-Insights

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

17. Dezember 2021

Schwachstellen-Insights

Security in context: When is a CVE not a CVE?

17. Dezember 2021

Schwachstellen-Insights

Log4Shell in a nutshell (for non-developers & non-Java developers)

15. Dezember 2021

Schwachstellen-Insights

Log4Shell remediation cheat sheet

14. Dezember 2021

Schwachstellen-Insights

The Log4j vulnerability and its impact on software supply chain security

13. Dezember 2021

Schwachstellen-Insights

Log4Shell: Schneller aufspüren und beheben mit Snyk

13. Dezember 2021

Schwachstellen-Insights

Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.17.1

10. Dezember 2021

Anwendungssicherheit

Responsible disclosure: CodeCov CEO & CTO share learnings from the breach

9. Dezember 2021

Container-Sicherheit

Snyk achieves AWS Security Competency status

30. November 2021

Schwachstellen-Insights

How to prevent Trojan Source attacks with Snyk Code

17. November 2021

DevSecOps

Proactively fixing vulnerabilities to maintain Java security and project hygiene with Snyk

16. November 2021

Anwendungssicherheit

AppSec during hypergrowth: Empower your developers to overcome the tech talent shortage

16. November 2021

Schwachstellen-Insights

How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint

10. November 2021

Code-Sicherheit

How Snyk Code prioritizes vulnerabilities using their Priority Score

9. November 2021

Open-Source-Sicherheit

How Datto made developer-first security a reality with Snyk

9. November 2021

Schwachstellen-Insights

Exploring extensions of dependency confusion attacks via npm package aliasing

4. November 2021

Schwachstellen-Insights

JavaScript type confusion: Bypassed input validation (and how to remediate)

3. November 2021

Code-Sicherheit

How MongoDB built a successful security champions program

2. November 2021

IaC-Sicherheit

What are security misconfigurations and how can you prevent them?

1. November 2021

Code-Sicherheit

Snyk Code adds language support for Apex, API, GraphQL security

28. Oktober 2021

Code-Sicherheit

Providing Comprehensive Application Security from Code to Production: New Snyk and Hdiv Security Partnership

26. Oktober 2021

Code-Sicherheit

Security Horror Story: Accidentally exposing PII data

25. Oktober 2021