Blog Archive

Exploring extensions of dependency confusion attacks via npm package aliasing

4 novembre 2021

JavaScript type confusion: Bypassed input validation (and how to remediate)

3 novembre 2021

Why the Facebook outage and Twitch breach matter to business leaders

14 octobre 2021

SnykCon 2021 recap #2: Supply chain security, the future of cybersecurity, automation as an enabler, and more

8 octobre 2021

Detect and prevent dependency confusion attacks on npm to maintain supply chain security

13 septembre 2021

How Snyk Social Trends help you fix essential security vulnerabilities

18 août 2021

Announcing Social Trends: Use social media for security intelligence

28 juillet 2021

5 ways to prevent PHP code injection

29 juin 2021

Mitigating and remediating intent-based Android security vulnerabilities

2 juin 2021

Hunting intent-based Android security vulnerabilities with Snyk Code

27 mai 2021

Deep dive into Visual Studio Code extension security vulnerabilities

26 mai 2021

Snyk takes on responsibility for Node.js ecosystem vulnerability disclosure program

25 mai 2021

Exploring intent-based Android security vulnerabilities on Google Play

18 mai 2021

SuiteCRM: PHAR deserialization vulnerability to code execution

7 mai 2021

Snyk uncovers malicious code activities in open source supply chain security on the npm registry

5 mai 2021

Snyk’s new vulnerability cards - fix issues fast with a new look and feel

2 mars 2021

SolarWinds Orion Security Breach: A Shift In The Software Supply Chain Paradigm

2 mars 2021

Cache poisoning in popular open source packages

18 janvier 2021

What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm

12 janvier 2021

Golang security: access restriction bypass vulnerability in JWT

22 décembre 2020

Command injection: how it works, what are the risks, and how to prevent it

25 novembre 2020