3862 articles
3862 ARTICLES
Our investigation of the security incident disclosed by Microsoft and CISA and attributed to Chinese threat actor Storm-0558, found that this incident seems to have a broader scope than originally assumed. Organizations using Microsoft and Azure services should take steps to assess potential impact.
No matter where you are on your journey to becoming secure at scale, here are four best practices you can implement immediately to get you closer to enterprise-level security.
In this post, we’ll cover using Snyk in your CI/CD pipelines to catch security issues quickly and empower your developers to fix them before they ever get to production.
Gain a deeper understanding of why it’s essential to monitor non-standard pods and containers, including static pods, mirror pods, init containers, pause containers, and ephemeral containers within your Kubernetes environment.
In this post, we’ll look at how AI can improve the software development lifecycle (SDLC) and the pitfalls that can come from blindly applying AI to your existing processes.
In this post, we’ll review common patterns and types of IDOR vulnerabilities and how to protect against them.
Discover the advantages and hurdles of caching database query results. Learn how caching enhances performance, scalability, and resource utilization, while also delving into the associated challenges.
This blog will detail deserialization vulnerabilities in Swift that can occur when using the popular APIs, NScoding and NSSecureCoding, and how to prevent it properly.
This article reviews several best practices we can implement to make an attack surface analysis more effective.
In the earlier posts in this series, we showed not only how to get rid of unused access keys, but also how to minimize risk by applying a least-privilege strategy. In this final post, we’ll at last get into the discussion of alternative solutions to using access keys.
In this article, we’ll dive deeper into what XS leaks are and how they occur. Then, we’ll review some hands-on examples of how to prevent them.
Uncover the essence of Redpoint Infrared 100, Chainguard’s step towards nuanced vulnerability scoring.