Blog Archiv

Schwachstellen-Insights

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine

16. März 2022

Schwachstellen-Insights

Magento security requires additional patch to fix sanitization vulnerability

24. Februar 2022

Schwachstellen-Insights

Join The Big Fix: a 24-hour livestream dedicated to fixing security vulnerabilities in your projects

21. Februar 2022

Schwachstellen-Insights

CVE-2022-24086 Vulnerability alert for websites using Magento Ecommerce

17. Februar 2022

Schwachstellen-Insights

Kubernetes-Sicherheit für Entwickler und Laufzeit: Unsere Zusammenarbeit mit Sysdig

16. Februar 2022

Schwachstellen-Insights

Lessons learned from the Argo CD zero-day vulnerability (CVE-2022-24348)

10. Februar 2022

Schwachstellen-Insights

Log4Shell remediation with Snyk by the numbers

5. Februar 2022

Schwachstellen-Insights

Fun with ciphers in copycat Wordles

2. Februar 2022

Schwachstellen-Insights

Analyzing the PwnKit local privilege escalation exploit

29. Januar 2022

Schwachstellen-Insights

Stranger Danger: Live hack of how a Log4Shell exploit works

25. Januar 2022

Schwachstellen-Insights

URL confusion vulnerabilities in the wild: Exploring parser inconsistencies

10. Januar 2022

Schwachstellen-Insights

Open source maintainer pulls the plug on npm packages colors and faker, now what?

9. Januar 2022

Schwachstellen-Insights

FTC highlights the importance of securing Log4j and software supply chain

7. Januar 2022

Schwachstellen-Insights

CTF secrets revealed: TopLang challenge from SnykCon 2021 explained

6. Januar 2022

Schwachstellen-Insights

Log4Shell webinar: What you need to know

5. Januar 2022

Schwachstellen-Insights

New Log4j 2.17.1 fixes CVE-2021-44832 remote code execution (but it’s not as bad as it sounds)

29. Dezember 2021

Schwachstellen-Insights

Snyk makes it easier to fix Log4Shell with extended free scans

21. Dezember 2021

Schwachstellen-Insights

Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

18. Dezember 2021

Schwachstellen-Insights

Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI

18. Dezember 2021

Schwachstellen-Insights

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

17. Dezember 2021

Schwachstellen-Insights

Security in context: When is a CVE not a CVE?

17. Dezember 2021

Schwachstellen-Insights

Log4Shell in a nutshell (for non-developers & non-Java developers)

15. Dezember 2021

Schwachstellen-Insights

Log4Shell remediation cheat sheet

14. Dezember 2021

Schwachstellen-Insights

The Log4j vulnerability and its impact on software supply chain security

13. Dezember 2021