2432 articles
Check out the new zero-CVE Chainguard Images built in November 2024, including offerings for Bun, CockroachDB, Open Liberty, Selenium, and more.
Chainguard wanted to know more about malware prevention in Linux distributions. So we did a study to see what maintainers are doing about it. See the results.
With Snyk’s approach and Snyk AppRisk, implementing risk-based prioritization is easy. Here’s how Snyk’s developer-first, holistic approach works.
Discover the details of the Ultralytics AI supply chain attack, a sophisticated two-phase breach targeting PyPI releases and GitHub Actions with cryptocurrency mining malware. Learn how to detect exposure, secure your projects, and protect against future vulnerabilities using tools like Snyk.
Dive into Server-Side Request Forgery (SSRF) vulnerabilities in Go applications and explore mitigation techniques. Learn how to secure your Go code and leverage tools like Snyk Code for proactive security.
Chainguard has migrated its serving platform from Kubernetes to Cloud Run. Take a peek at how we did it, and how it makes Chainguard a more secure place.
Snyk now includes license information in its generated SBOMs, giving developers a clearer picture of their application’s components and associated license risks and simplifying compliance and security efforts. This new feature streamlines SBOM creation and empowers developers to make informed decisions.
Read top-level findings from Snyk’s 2024 Open Source Security Report, exploring slowing progress and new challenges for DevSecOps.
Finding and closing coverage gaps in your AppSec program is not a one-and-done process, it’s an ongoing combination of efforts. See how ASPM makes it easier.
Looking to turn a single-arch Docker build into a multi-arch? See how you can do that while still using Chainguard Images.
In the Women Leading Security series, Snyk CMO Jonaki Egenolf spoke with influential leaders about challenges and opportunities in the journey toward a more inclusive cybersecurity industry.
DevSecOps integrates security into the entire software development lifecycle. By empowering developers with automated tools and shifting security left, organizations can deliver software faster and more securely.