FEATURED REPORT
IngressNightmare: CVE-2025-1974 - 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX
Over 40% of cloud environments are vulnerable to RCE, likely leading to a complete cluster takeover.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
CVE-2025-29927 Authorization Bypass in Next.js Middleware
On Friday morning, March 21, 2025, at 9:00 a.m. UTC, a security advisory identified as CVE-2025-29927 was published. It cited a critical 9.1 severity vulnerability for mainstream Next.js applications.
1 MIN READ
arrow_forward
CYBERSECURITY
How to use the new CloudTrail network activity events for AWS VPC Endpoints
Learn how AWS VPC Endpoint CloudTrail logs can help you troubleshoot endpoint policies and strengthen your network’s security against data exfiltration.
1 MIN READ
arrow_forward
CYBERSECURITY
Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance
Join Snyk’s Field CTO, Steven Schmidt, and Mihai Saveschi, Senior Director of Security Service Management at CIBC, for an exclusive fireside chat on the evolving landscape of application security in financial services.
1 MIN READ
arrow_forward
CYBERSECURITY
The Distroless Revolution Will Be Chainguarded
Chainguard OS is the next generation in open source software delivery. Learn all about the principles and technology that make it possible.
1 MIN READ
arrow_forward
CYBERSECURITY
Mitigating a rsync Vulnerability: A Lesson in Compiler Hardening
Chainguard’s defense-in-depth security strategy protected against multiple rsync CVEs before they were even reported. See how we did it, using compiler flags.
1 MIN READ
arrow_forward
CYBERSECURITY
SAML roulette: the hacker always wins
Introduction In this post, we’ll show precisely how to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library
1 MIN READ
arrow_forward
CYBERSECURITY
CYBERSECURITY
Securing Cloud Databases: Best Practices with ClickHouse and Wiz
How to protect sensitive data in cloud-hosted databases with built-in security controls, best practices, and continuous risk monitoring.
1 MIN READ
arrow_forward
CYBERSECURITY
Building a Culture of Secure Coding: Empowering Developers to Build Resilient Software
Discover practical steps to create a culture of secure coding, empowering developers to build resilient software and prevent costly vulnerabilities. Insights from Snyk.
1 MIN READ
arrow_forward
CYBERSECURITY
Unburdening Developers From Vulnerability Fatigue with Snyk Delta Findings
Tired of endless security alerts? Snyk Delta Findings in the IDE helps developers cut through the noise and focus on new vulnerabilities introduced in their code. Reduce vulnerability fatigue and ship secure software faster. Get started for free!
1 MIN READ
arrow_forward
CYBERSECURITY
Have We Reached a Distroless Tipping Point?
The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next.
1 MIN READ
arrow_forward