Blog Archive

Snyk Team

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

February 6, 2024

Code Security

10 GitHub Security Best Practices

February 5, 2024

Vulnerability Insights

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Container Security

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Container Security

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Container Security

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Container Security

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

Code Security

7 tips to become a successful bug bounty hunter

January 25, 2024

DevSecOps

The 4 best DevSecOps tools for a secure DevOps workflow

January 23, 2024

AI

3 tips from Snyk and Dynatrace’s AI security experts

January 22, 2024

Application Security

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

January 18, 2024

Open Source Security

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

January 18, 2024

ASPM

Snyk welcomes Helios, accelerating our ASPM vision with runtime insights

January 16, 2024

Engineering

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

January 10, 2024

AI

How to choose a security tool for your AI-generated code

January 9, 2024

Application Security

Build and deploy a Node.js security scanning API to Platformatic Cloud

January 5, 2024

Supply Chain Security

Kroger’s approach to supply chain security

January 2, 2024

Application Security

Krampus delivers an end-of-year Struts vulnerability

January 2, 2024

Engineering

3 tips for rebuilding a Docker image faster (and save CI seconds!)

December 28, 2023

Application Security

How to prevent open redirect vulnerabilities in Laravel

December 27, 2023

Code Security

Command injection in Python: examples and prevention

December 21, 2023

AI

Is your team on the *security* naughty or nice list?

December 20, 2023

Application Security

Vulnerability disclosure: Which comes first, the security bug in PHP or the CVE?

December 19, 2023

DevSecOps

Common SAML vulnerabilities and how to remediate them

December 19, 2023