4276 articles
4276 ARTICLES
Probely, now a Snyk Business, is putting some UI changes into effect. We explain this first round of changes, and how we’re looking at further changes in the future to match Snyk’s design language.
In this post, I will introduce the “cookie sandwich” technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie
Find out how the Cyber Resilience Act (CRA) sets new security standards for the EU and how Snyk can help simplify compliance with its developer-friendly tools.
Open SSF’s recommended compiler flags are a great way to improve memory safety and security. Check out what effect using these flags can have.
Fetch the Flag, Snyk’s annual Capture the Flag (CTF) competition, is back for 2025. Join this exciting virtual event on February 27, 2025, hosted by Snyk and cybersecurity expert John Hammond, from 9 am to 9 pm ET.
Chainguard released several new images in December 2024, including images for Adoptium, AWX, CouchDB, and others. Check out the full list.
Discover how behavioral cloud IOCs can expose malicious activity as we break down real-world examples to reveal actionable detection techniques.
Discover how BFI Finance Indonesia transformed their SDLC with proactive security practices, improving compliance, developer experience, and collaboration. Learn key insights from their journey shared at CISO Indonesia 2024, moderated by Snyk’s Didik Achmadi.
Joining data from multiple tables is a complicated topic. There are two main strategies: database-level and application-level joins. Prisma ORM offers both options. In this article you’ll learn the tradeoffs between the two so you can pick the best strategy.
Wiz named as a Customers’ Choice for Cloud Native Application Protection Platforms (CNAPP)
Snyk joined JPMorgan Chase’s Hall of Innovation for 2024, celebrating its impact on application security, market disruption, and overall partnership. Learn more about this collaboration.
Snyk Security Labs found no indications that Cursor was in any way vulnerable to dependency confusion.