Blog Archive

Vulnerability Insights

Weak Hash vulnerability discovered in crypto-js and crypto-es (CVE-2023-46233 & CVE-2023-46133)

October 25, 2023

Code Security

Why You Need a Security Companion for AI-Generated Code

October 25, 2023

Cloud Security

Adding Snyk security to Jira and Bitbucket Cloud

October 25, 2023

Application Security

How to secure JavaScript applications right from the CLI

October 24, 2023

Code Security

Getting started with query parameterization

October 24, 2023

Engineering

How to keep an HTTP connection alive for 9 hours

October 23, 2023

Application Security

Power up security collaboration with Snyk and Slack

October 23, 2023

AI

GitHub Copilot code security: XSS in React

October 19, 2023

Code Security

Securing symmetric encryption algorithms in Java

October 18, 2023

Application Security

How to protect Node.js apps from CSRF attacks

October 17, 2023

ASPM

6 steps for scaling risk-based AppSec programs

October 13, 2023

Engineering

Installing and managing Java on macOS

October 12, 2023

Vulnerability Insights

Find and fix HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487

October 11, 2023

Code Security

How to update cURL

October 11, 2023

Supply Chain Security

Cybersecurity Venture’s 2023 Software Supply Chain Attack Report

October 10, 2023

AI

SAS and Snyk discuss the future of AI for development and security teams

October 9, 2023

Vulnerability Insights

How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

October 5, 2023

Application Security

Introducing the Snyk App for Compass: A complete view of software component risk

October 5, 2023

Vulnerability Insights

High severity vulnerability found in libcurl and curl (CVE-2023-38545)

October 4, 2023

Open Source Security

Priorities from the OpenSSF Secure Open Source Software Summit 2023

October 4, 2023

Application Security

Snyk Partner Speak video series with HashiCorp

October 4, 2023

AI

Does AI lead to AppSec hell or nirvana?

October 3, 2023

Cloud Security

Announcing IaC+ early access: Secure your infrastructure configurations across the SDLC

October 3, 2023

Engineering

Modern VS Code extension development tutorial: Building a secure extension

October 2, 2023