FEATURED REPORT
Top takeaways from re:Invent 2022
Here are the major announcements at re:Invent that got our attention and some of the things Snyk was up to in Vegas.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
Introducing PEACH, a tenant isolation framework for cloud applications
A step-by-step framework for modeling and improving SaaS and PaaS tenant isolation by reducing your cloud applications’ attack surface
1 MIN READ
arrow_forward
CYBERSECURITY
Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)
SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.
1 MIN READ
arrow_forward
CYBERSECURITY
Error Handling in a REST API with NestJS and Prisma 7
Learn how to handle Prisma errors in a NestJS REST API: throw exceptions in controllers and build an exception filter for Prisma error codes like P2002. Updated for Prisma ORM 7 and NestJS 11.
1 MIN READ
arrow_forward
CYBERSECURITY
Azure Bicep security fundamentals
In those post, we look at Azure Bicep security fundamentals around inputs, outputs, secrets, Key Vault, and more.
1 MIN READ
arrow_forward
CYBERSECURITY
CVE-2022-27518 exploited in the wild by APT5: everything you need to know
Detect and mitigate CVE-2022-27518, a Citrix ADC and Gateway unauthenticated RCE 0-day exploited in the wild by a nation state actor. Organizations should patch urgently.
1 MIN READ
arrow_forward
CYBERSECURITY
Secret-based cloud supply-chain attacks: Case study and lessons for security teams
CI/CD pipelines, as an essential part of the software development process, are an attractive target to malicious actors. Based on our research of cloud environments, we share common misconfigurations and provide tips on how to remediate them in order to prevent supply-chain attacks.
1 MIN READ
arrow_forward
CYBERSECURITY
The archiving of the Gorilla Web Toolkit: A tale of two software security risks
Learn more about the archiving of the Gorilla Web Toolkit, a toolkit used to write HTTP-based Go applications. This presented two major security challenges.
1 MIN READ
arrow_forward
CYBERSECURITY
Introducing Azure Least Privilege: Enforce least privilege access for Azure environments
Wiz extends its CIEM capabilities to enable least privilege access for Azure environments.
1 MIN READ
arrow_forward
CYBERSECURITY
AWS re:Invent 2022: How Neiman Marcus transitioned to developer-first security
During a discussion at AWS re:Invent 2022, Neiman Marcus Cyber Security Architect Omar Peerzada described how his team used Snyk to adopt a developer-first security strategy.
1 MIN READ
arrow_forward
CYBERSECURITY
Top Security Talks from AWS re:Invent 2022
AWS re:Invent is the largest conference of the year for Amazon Web Services (AWS) with hundreds of talks. We picked our favorite cloud security talks that are available online.
1 MIN READ
arrow_forward
CYBERSECURITY
Using Snyk reporting for data-driven security
An overview of the benefits offered by Snyk’s newly enhanced reporting capabilities.
1 MIN READ
arrow_forward