4276 articles
4276 ARTICLES
Detect and mitigate CVE-2023-34362, a remote code execution vulnerability in MOVEit Transfer exploited in the wild. Organizations should patch urgently.
Learn how Chainguard engineers created a chain of OpenJDK packages to provide full provenance from pure source code for the entire Java ecosystem in Wolfi.
Learn about the different tool types that ethical hackers are using to find vulnerabilities and our list of the top 10 tools ethical hackers are using today.
In this article, we’ll look at how LDAP injection works, the potential consequences of this type of attack, and the various means of strengthening applications against it.
Learn how to identify unused and unnecessary long-lived IAM User access keys.
We’re excited to announce a new Snyk app for Slack that provides notifications within the channels your teams rely on to address security issues in your code, open source dependencies, containers, and cloud infrastructure.
To observe mental health awareness this month, we asked several Snyk employees for wellness tips that may help others. Here are the biggest takeaways from our conversations with them.
Chainguard Labs announces, “Speranza: Usable, privacy-friendly software signing,” to help balance usability and privacy for software signing techniques.
This blog post will discuss lateral movement risks from on-prem to the cloud. We will explain attacker TTPs, and outline best practices for cloud builders and defenders to help secure their cloud environments and mitigate risk.
In honor of Asian American Pacific Islander Heritage Month, we want to blend celebration with education on important issues in the AAPI community by amplifying the voices of our Asian@Snyk resource group members.
In this article, we’ll explore eight popular penetration testing tools, their benefits, and their ideal use cases.
Learn how Chainguard Images can you achieve or maintain your FedRAMP compliance authorization with secure-by-default base images.