Blog Archiv

Container-Sicherheit

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

6. Februar 2024

Snyk Team

Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation

6. Februar 2024

Code-Sicherheit

10 GitHub Security Best Practices

5. Februar 2024

Schwachstellen-Insights

Leaky Vessels: Sicherheitslücken bei Docker und runc-Containern (Januar 2024)

31. Januar 2024

Container-Sicherheit

Schwachstelle: runc process.cwd und Ausbruch aus fds-Containern (CVE-2024-21626)

31. Januar 2024

Container-Sicherheit

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

31. Januar 2024

Container-Sicherheit

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

31. Januar 2024

Container-Sicherheit

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

31. Januar 2024

Code-Sicherheit

7 tips to become a successful bug bounty hunter

25. Januar 2024

DevSecOps

The 4 best DevSecOps tools for a secure DevOps workflow

23. Januar 2024

KI

3 tips from Snyk and Dynatrace’s AI security experts

22. Januar 2024

Anwendungssicherheit

New Year's security resolutions for 2024 from Snyk DevRel, SecRel, and friends

18. Januar 2024

Open-Source-Sicherheit

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

18. Januar 2024

ASPM

Snyk welcomes Helios, accelerating our ASPM vision with runtime insights

16. Januar 2024

SW-Entwicklung

Mastering Python virtual environments: A complete guide to venv, Docker, and securing your code

10. Januar 2024

KI

How to choose a security tool for your AI-generated code

9. Januar 2024

Anwendungssicherheit

Build and deploy a Node.js security scanning API to Platformatic Cloud

5. Januar 2024

Sicherheit für die Lieferkette

Kroger’s approach to supply chain security

2. Januar 2024

Anwendungssicherheit

Krampus delivers an end-of-year Struts vulnerability

2. Januar 2024

SW-Entwicklung

3 tips for rebuilding a Docker image faster (and save CI seconds!)

28. Dezember 2023

Anwendungssicherheit

How to prevent open redirect vulnerabilities in Laravel

27. Dezember 2023

Code-Sicherheit

Command injection in Python: examples and prevention

21. Dezember 2023

KI

Is your team on the *security* naughty or nice list?

20. Dezember 2023

Anwendungssicherheit

Vulnerability disclosure: Which comes first, the security bug in PHP or the CVE?

19. Dezember 2023