Skip to main content

Blog Archiv

Narrow your search

Topic

Audience

Filter zurücksetzen

Anzeige 1 - 20 von 20 posts

feature-snyk-platform-learn-getting-snyk-setup

Container-Sicherheit

Abusing Ubuntu 24.04 features for root privilege escalation

9. September 2024

feature-snyk-platform-learn-getting-snyk-setup

KI

Agent hijacking: The true impact of prompt injection attacks

28. August 2024

feature-snyk-platform-learn-using-snyk-with-CI-CD

Security Labs

Vulnerabilities in NodeJS C/C++ add-on extensions

14. August 2024

blog-feature-open-source-security

Code-Sicherheit

Repo Jacking: The Great Source-code Swindle

25. Juli 2024

wordpress-sync/blog-feature-toolkit

Anwendungssicherheit

Breaking caches and bypassing Istio RBAC with HTTP response header injection

20. Juni 2024

feature-getting-snyk-setup

Open-Source-Sicherheit

Call for action: Exploring vulnerabilities in Github Actions

6. Juni 2024

feature-leaky-vessels-deep-dive

Container-Sicherheit

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

6. Februar 2024

feature-leaky-vessels-2024-21626

Container-Sicherheit

Schwachstelle: runc process.cwd und Ausbruch aus fds-Containern (CVE-2024-21626)

31. Januar 2024

feature-leaky-vessels-2024-23651

Container-Sicherheit

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

31. Januar 2024

feature-leaky-vessels-2024-23652

Container-Sicherheit

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

31. Januar 2024

feature-leaky-vessels-2024-23653

Container-Sicherheit

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

31. Januar 2024

feature-insights-context

Anwendungssicherheit

SocketSleuth: Improving security testing for WebSocket applications

6. September 2023

blog-feature-pypi-spoof

Anwendungssicherheit

Gitpod remote code execution 0-day vulnerability via WebSockets

27. Februar 2023

wordpress-sync/feature-openssl-blue

Schwachstellen-Insights

Breaking down the ’critical’ OpenSSL vulnerability

4. November 2022

Schwachstellen-Insights

Phony PyPi package imitates known developer

5. Oktober 2022

wordpress-sync/blog-hero-pypi-malware-discord

Schwachstellen-Insights

Snyk identifiziert PyPi-Malware, die Daten und Zahlungsinformationen von Discord und Roblox Nutzern abgreift

16. August 2022

wordpress-sync/blog-banner-google-play

Schwachstellen-Insights

Mitigating and remediating intent-based Android security vulnerabilities

2. Juni 2021

Schwachstellen-Insights

Hunting intent-based Android security vulnerabilities with Snyk Code

27. Mai 2021

Schwachstellen-Insights

Deep dive into Visual Studio Code extension security vulnerabilities

26. Mai 2021

Schwachstellen-Insights

Exploring intent-based Android security vulnerabilities on Google Play

18. Mai 2021

1

Subscribe to our newsletter

Get all latest content from Snyk directly to your mailbox.