Blog Archive

Application Security

Panel recap: Breaking Bad Security Habits with Corey Quinn

December 20, 2022

Application Security

Building an application security battle plan: Home Alone edition

December 20, 2022

Snyk Team

Cloud Security Podcast awarded SANS Podcast of the Year

December 19, 2022

Open Source Security

Exploring the Spring Security authorization bypass (CVE-2022-31692)

December 16, 2022

Open Source Security

Snyk in 30: Open source security for Atlassian Bitbucket Cloud

December 15, 2022

DevSecOps

Top takeaways from re:Invent 2022

December 14, 2022

Vulnerability Insights

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

December 14, 2022

IaC Security

Azure Bicep security fundamentals

December 13, 2022

Application Security

AWS re:Invent 2022: How Neiman Marcus transitioned to developer-first security

December 12, 2022

Code Security

Using Snyk reporting for data-driven security

December 9, 2022

Engineering

How to handle Node.js file uploads with Fastify

December 8, 2022

Code Security

5 best practices for React with TypeScript security

December 8, 2022

Compliance

Why tool consolidation matters for developer security

December 6, 2022

Application Security

How to verify and secure your Mastodon account

December 5, 2022

DevSecOps

3 tips for effective developer security training

December 1, 2022

Vulnerability Insights

Code injection vulnerabilities (CVSSv3 5.8) found in Snyk CLI and IDE plugins

November 30, 2022

Compliance

Snyk expands in Asia-Pacific (APAC) with new datacenter in Sydney, Australia

November 30, 2022

IaC Security

10 AWS security considerations when migrating

November 29, 2022

Application Security

Can gamification unite development and security?

November 28, 2022

Code Security

How to use GitHub Actions environment variables

November 22, 2022

Code Security

How to write tests in Python using doctest

November 21, 2022

Code Security

Writing unit tests in Java

November 18, 2022

Container Security

Setting up SSL/TLS for Kubernetes Ingress

November 17, 2022

Code Security

Dependency injection in JavaScript

November 17, 2022