FEATURED REPORT
With Love, Your Applications
This year for Valentine’s Day, we’re imagining what a love letter from your applications to the tools that keep them secure might look like.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
New Chainguard Academy course: Painless Vulnerability Management
Enroll in Chainguard Academy’s new course on Painless Vulnerability Management to master security practices and use Chainguard Images for safer software.
1 MIN READ
arrow_forward
CYBERSECURITY
Reporting AppSec risk up to your CISO
Learn what information CISOs need to know about your application security program in order to have a clear understanding of risk.
1 MIN READ
arrow_forward
CYBERSECURITY
February Fortinet Advisory: everything you need to know
Fortinet offers guidance to detect and mitigate CVE-2024-21762 and CVE-2024-23113, critical RCE vulnerabilities in FortiOS and FortiProxy, including guidance that organizations should patch urgently.
1 MIN READ
arrow_forward
CYBERSECURITY
Automatic source locations with Rego
We recently released a series of improvements to Snyk IaC, and in this blog post, we’re taking a technical dive into a particularly interesting feature — automatic source code locations for rule violations.
1 MIN READ
arrow_forward
CYBERSECURITY
New attack vectors in EKS
We explore how advancements in EKS Access Entries and Pod Identity have opened new attack vectors and offer examples of how adversaries could exploit them.
1 MIN READ
arrow_forward
CYBERSECURITY
Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations
Get a detailed analysis of the entire attack chain of Microsoft’s breach by Midnight Blizzard (APT29), as well as detection and mitigation recommendations.
1 MIN READ
arrow_forward
CYBERSECURITY
Revolutionizing container security and CVE management
Discover Wolfi, the ‘secure-by-default’ undistro for container security, enhancing open-source software with minimal CVE counts and robust protection.
1 MIN READ
arrow_forward
CYBERSECURITY
Wiz AI-SPM extends support to Microsoft Azure OpenAI Service models
Secure Microsoft Azure AI Services, including Azure OpenAI, with Wiz AI-SPM providing full visibility into AI pipelines and risks on the Wiz Security Graph
1 MIN READ
arrow_forward
CYBERSECURITY
New EKS Access Management and Pod Identity features: a security analysis
The Wiz research team unpacks the security implications of the new EKS access and identity management features and recommends best practices when using them.
1 MIN READ
arrow_forward
CYBERSECURITY
Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know
Detect and mitigate CVE-2023-46805, CVE-2024-21887, CVE-2024-21888 and CVE-2024-21893, critical vulnerabilities in Ivanti VPN products. Organizations should patch urgently, and government agencies are instructed to isolate Ivanti VPN instances.
1 MIN READ
arrow_forward
CYBERSECURITY
Welcoming Danny Allan and Brian Rogan: Snyk leadership team expands with key appointments to accelerate innovation
We are excited to welcome two critical additions to the Snyk executive bench: Danny Allan, our new Chief Technology Officer, and Brian Rogan, our new Executive Vice President of Engineering.
1 MIN READ
arrow_forward