Liran Tal

Concerns of supply-chain attacks amplify as remote code execution was found in Ruby gem strong_password

7 juillet 2019

Snyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodash

5 juillet 2019

Serverless is great, but what about the security of my AWS Lambda functions and their dependencies?

3 juillet 2019

Best practices for secrets management in serverless applications

13 juin 2019

npm passes the 1 millionth package milestone! What can we learn?

4 juin 2019

10 Serverless security best practices

31 mai 2019

Scoring security vulnerabilities 101: Introducing CVSS for CVEs

16 mai 2019

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

6 mai 2019

190,000 users affected by Docker Hub’s security breach. Now what?

29 avril 2019

How much do we really know about how packages behave on the npm registry?

22 avril 2019

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

15 avril 2019

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

4 avril 2019