Blog Archive

Vulnerability Insights

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019

Application Security

Introducing experimental integrity policies to Node.js

March 21, 2019

Open Source Security

81% believe developers should own security, but they aren’t well-equipped

February 26, 2019

Open Source Security

Open source maintainers want to be secure, but 70% lack skills

February 26, 2019

Open Source Security

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

February 26, 2019

Open Source Security

78% of vulnerabilities are found in indirect dependencies, making remediation complex

February 26, 2019

Open Source Security

88% increase in application library vulnerabilities over two years

February 26, 2019

Open Source Security

10 npm Security Best Practices

February 19, 2019

Vulnerability Insights

A serious security flaw in runC can result in root privilege escalation in Docker and Kubernetes

February 13, 2019

Vulnerability Insights

Severe security vulnerability in Bower’s zip archive extraction

January 31, 2019

Open Source Security

Monitoring open source packages at runtime - now in open beta

January 30, 2019

Application Security

Snyk highlighted on the ThoughtWorks Technology Radar

December 13, 2018

Application Security

JVM Ecosystem Report 2018

October 17, 2018

Application Security

JVM Ecosystem report 2018 - About your Platform and Application

October 17, 2018

Application Security

JVM Ecosystem report 2018 - About your Tools

October 17, 2018

Application Security

JVM Ecosystem report 2018 - About your processes and you

October 17, 2018

Open Source Security

10 Spring Boot security best practices

August 16, 2018

Open Source Security

JavaScript and Node.js Security – The Common Pitfalls

April 11, 2018

Application Security

Using the Snyk API to find and fix vulnerabilities

January 3, 2018

Vulnerability Insights

Fixing Serverless Security Vulnerabilities

October 20, 2016

Application Security

Threat modelling For Node.js applications

August 31, 2016