Blog Archiv

Cloud-Sicherheit

6 big AWS IAM vulnerabilities – and how to avoid them

5. November 2021

Schwachstellen-Insights

Exploring extensions of dependency confusion attacks via npm package aliasing

4. November 2021

Schwachstellen-Insights

JavaScript type confusion: Bypassed input validation (and how to remediate)

3. November 2021

Cloud-Sicherheit

Why the Facebook outage and Twitch breach matter to business leaders

14. Oktober 2021

Schwachstellen-Insights

SnykCon 2021 recap #2: Supply chain security, the future of cybersecurity, automation as an enabler, and more

8. Oktober 2021

Schwachstellen-Insights

Detect and prevent dependency confusion attacks on npm to maintain supply chain security

13. September 2021

Schwachstellen-Insights

How Snyk Social Trends help you fix essential security vulnerabilities

18. August 2021

Schwachstellen-Insights

Announcing Social Trends: Use social media for security intelligence

28. Juli 2021

Schwachstellen-Insights

5 ways to prevent PHP code injection

29. Juni 2021

Schwachstellen-Insights

Snyk takes on responsibility for Node.js ecosystem vulnerability disclosure program

25. Mai 2021

Schwachstellen-Insights

SuiteCRM: PHAR deserialization vulnerability to code execution

7. Mai 2021

Schwachstellen-Insights

Snyk uncovers malicious code activities in open source supply chain security on the npm registry

5. Mai 2021

Schwachstellen-Insights

Snyk’s new vulnerability cards - fix issues fast with a new look and feel

2. März 2021

Schwachstellen-Insights

SolarWinds Orion Security Breach: A Shift In The Software Supply Chain Paradigm

2. März 2021

DevSecOps

Die vier Schritte der Schwachstellenbehebung

16. Februar 2021

Anwendungssicherheit

Security Vulnerability explained: types and remediation

11. Februar 2021

Schwachstellen-Insights

Cache poisoning in popular open source packages

18. Januar 2021

Schwachstellen-Insights

What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm

12. Januar 2021

Schwachstellen-Insights

Golang security: access restriction bypass vulnerability in JWT

22. Dezember 2020

Schwachstellen-Insights

Command injection: how it works, what are the risks, and how to prevent it

25. November 2020

Schwachstellen-Insights

Buffer overflow in Chromium affecting multiple packages

23. November 2020

Schwachstellen-Insights

Regular Expression Denial of Service (REDoS) in UAParser.js

26. Oktober 2020

Schwachstellen-Insights

SourMint malicious SDK research write up

16. Oktober 2020

Schwachstellen-Insights

SourMint: iOS remote code execution, Android findings, and community response

15. Oktober 2020