Blog Archiv

KI

Snyk Security Labs Testing Update: Cursor.com AI Code Editor

14. Januar 2025

Container-Sicherheit

Abusing Ubuntu 24.04 features for root privilege escalation

9. September 2024

KI

Agent hijacking: The true impact of prompt injection attacks

28. August 2024

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

14. August 2024

Code-Sicherheit

Repo Jacking: The Great Source-code Swindle

25. Juli 2024

Anwendungssicherheit

Breaking caches and bypassing Istio RBAC with HTTP response header injection

20. Juni 2024

Open-Source-Sicherheit

Call for action: Exploring vulnerabilities in Github Actions

6. Juni 2024

Container-Sicherheit

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

6. Februar 2024

Container-Sicherheit

Schwachstelle: runc process.cwd und Ausbruch aus fds-Containern (CVE-2024-21626)

31. Januar 2024

Container-Sicherheit

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

31. Januar 2024

Container-Sicherheit

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

31. Januar 2024

Container-Sicherheit

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

31. Januar 2024

Anwendungssicherheit

SocketSleuth: Improving security testing for WebSocket applications

6. September 2023

Anwendungssicherheit

Gitpod remote code execution 0-day vulnerability via WebSockets

27. Februar 2023

Schwachstellen-Insights

Breaking down the ’critical’ OpenSSL vulnerability

4. November 2022

Schwachstellen-Insights

Phony PyPi package imitates known developer

5. Oktober 2022

Schwachstellen-Insights

Snyk identifiziert PyPi-Malware, die Daten und Zahlungsinformationen von Discord und Roblox Nutzern abgreift

16. August 2022

Schwachstellen-Insights

Mitigating and remediating intent-based Android security vulnerabilities

2. Juni 2021

Schwachstellen-Insights

Hunting intent-based Android security vulnerabilities with Snyk Code

27. Mai 2021

Schwachstellen-Insights

Deep dive into Visual Studio Code extension security vulnerabilities

26. Mai 2021

Schwachstellen-Insights

Exploring intent-based Android security vulnerabilities on Google Play

18. Mai 2021