Blog Archive

Application Security

Understanding command injection vulnerabilities in Go

November 14, 2024

Open Source Security

Snyk named a Customer Favorite in The Forrester Wave™: Software Composition Analysis Software, Q4 2024 Report

November 13, 2024

Open Source Security

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

November 1, 2024

Open Source Security

Best practices for continuous vulnerability management

October 29, 2024

Application Security

Elevating views of risk: Holistic application risk management with Snyk

October 22, 2024

Application Security

Snyk announces commitment to Service for America, bringing security education access to all

October 17, 2024

DevSecOps

Ensuring comprehensive security testing in DevOps pipelines

October 17, 2024

AI

SnykLaunch Oct 2024: Enhanced PR experience, extended visibility, AI-powered security, holistic risk management

October 8, 2024

Code Security

The mysterious supply chain concern of string-width-cjs npm package

October 3, 2024

Container Security

Proactive AppSec continuous vulnerability management for developers and security teams

October 2, 2024

Open Source Security

Going beyond reachability to prioritize what matters most

October 1, 2024

Container Security

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

September 27, 2024

Application Security

How to prevent log injection vulnerability in JavaScript and Node.js applications

September 26, 2024

Container Security

Abusing Ubuntu 24.04 features for root privilege escalation

September 9, 2024

Customer

How Axel Springer National Media and Tech achieved continuous security with Snyk

September 3, 2024

Application Security

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

August 29, 2024

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

August 14, 2024

Code Security

Repo Jacking: The Great Source-code Swindle

July 25, 2024

Application Security

How to secure a REST API?

June 27, 2024

Application Security

Polyfill supply chain attack embeds malware in JavaScript CDN assets

June 26, 2024

Open Source Security

Call for action: Exploring vulnerabilities in Github Actions

June 6, 2024