Blog Archive

Vulnerability Insights

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine

March 16, 2022

Container Security

Simplifying container security with Snyk’s security expertise

March 8, 2022

DevSecOps

Snyk and Bitbucket best practices cheat sheet

March 3, 2022

Container Security

Securing cloud infrastructure for PCI review

March 3, 2022

Application Security

Introduction to penetration testing for developers

March 2, 2022

DevSecOps

DevSecCon panel discussion: Which comes first, security or the app?

March 1, 2022

Open Source Security

Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters

February 28, 2022

Application Security

Even non-developers can fix security vulnerabilities in code at The Big Fix

February 23, 2022

Vulnerability Insights

Join The Big Fix: a 24-hour livestream dedicated to fixing security vulnerabilities in your projects

February 21, 2022

DevSecOps

A developer-centric approach to software

February 18, 2022

Vulnerability Insights

CVE-2022-24086 Vulnerability alert for websites using Magento Ecommerce

February 17, 2022

Open Source Security

Case study: Python RCE vulnerability in Celery

February 15, 2022

Open Source Security

SAST and SCA: Better together with Snyk

February 10, 2022

Vulnerability Insights

Lessons learned from the Argo CD zero-day vulnerability (CVE-2022-24348)

February 10, 2022

DevSecOps

Join "The Big Fix" to secure your projects with Snyk and earn cool swag

February 9, 2022

Compliance

Enhancing PCI compliance security with SAST and SCA

February 8, 2022

Vulnerability Insights

Log4Shell remediation with Snyk by the numbers

February 5, 2022

Application Security

Enterprise security: Digital transformation and risk management with Anheuser-Busch Inbev and Manulife

February 3, 2022

Vulnerability Insights

Fun with ciphers in copycat Wordles

February 2, 2022

Application Security

SnykCon recap: Building a developer-focused AppSec program

January 27, 2022

Vulnerability Insights

Stranger Danger: Live hack of how a Log4Shell exploit works

January 25, 2022