Blog Archive

Open Source Security

These aren’t the npm packages you’re looking for

May 4, 2022

Open Source Security

3 Jedi-inspired lessons to level up your JavaScript security

May 4, 2022

Open Source Security

Under the C: A glance at C/C++ vulnerabilities in Python land

April 28, 2022

DevSecOps

Snyk increases investment in partners with new Snyk Technology Alliance Partner Program 

April 27, 2022

Code Security

WillowTree roundtable: security for hypergrowth organizations

April 22, 2022

Application Security

5 tips for securing PHP Laravel

April 21, 2022

Code Security

The ultimate guide to Python pickle

April 20, 2022

Open Source Security

Spring4Shell extends to Glassfish and Payara: same vulnerability, new exploit

April 8, 2022

Code Security

Getting started with React Native security

April 7, 2022

Compliance

Make Snyk notifications work for you

April 6, 2022

Container Security

Snyk Open Source adds C/C++ security scanning for unmanaged dependencies

April 5, 2022

Code Security

Exploring 3 types of directory traversal vulnerabilities in C/C++

April 4, 2022

Application Security

Introducing SUS: Snyk Ultimate Security

April 1, 2022

Vulnerability Insights

Browsers tormented by open roll vulnerability

April 1, 2022

Vulnerability Insights

Alert: LaughTilYouCry ransomware sabotages npm package (with puns)

April 1, 2022

Vulnerability Insights

Spring4Shell: The zero-day RCE in the Spring Framework explained

April 1, 2022

Vulnerability Insights

Spring4Shell: What we know about the Java RCE vulnerability

March 31, 2022

Open Source Security

Using the Snyk Vulnerability Database to find projects for The Big Fix

March 30, 2022

Application Security

Building a secure GraphQL API with Node.js

March 29, 2022

Application Security

How to do password hashing in Java applications the right way!

March 24, 2022

Application Security

How Snyk helps satisfy White House cybersecurity recommendations

March 23, 2022

Vulnerability Insights

dompdf security alert: RCE vulnerability found in popular PHP PDF library

March 18, 2022

Vulnerability Insights

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine

March 16, 2022

Application Security

Hiring a virtual CISO to help your security team

March 9, 2022