FEATURED REPORT
Minimal container images: Towards a more secure future
Discover how minimal container images enhance software security and streamline your development process with Chainguard Images.
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
Do the dependency trees of widely used packages grow?
Discover how dependency trees of popular programming languages are growing and the implications for software supply chain security.
1 MIN READ
arrow_forward
CYBERSECURITY
The security course missing from higher education
We ask why high school and college computer science programs are lacking content on cybersecurity.
1 MIN READ
arrow_forward
CYBERSECURITY
We applaud PyPI steps to make Python more secure
Chainguard applauds PyPI’s mandatory 2FA for critical projects, a step towards securing the Python software supply chain.
1 MIN READ
arrow_forward
CYBERSECURITY
Exploring CVE-2022-33980: the Apache Commons configuration RCE vulnerability
In this post, we’ll explore CVE-2022-33980, the Apache Commons configuration RCE vulnerability. However, we want to make it clear that there’s no need for panic. This is not Log4Shell all over again. This is simple configuration manipulation.
1 MIN READ
arrow_forward
CYBERSECURITY
Transparently immutable tags using Sigstore's Rekor
Achieve immutable container image tags with Sigstore’s Rekor, ensuring transparency and tamper-evident logging for enhanced security.
1 MIN READ
arrow_forward
CYBERSECURITY
Webhook Security Best Practices
Webhooks are one of the best ways to transfer information about occasional events from one system to another. In contrast to methods like HTTP polling, webhooks are triggered by events. In this blog, we’ll cover the most effective practices for securing webhooks so we can share data between applications without creating a large attack surface.
1 MIN READ
arrow_forward
CYBERSECURITY
How to build a secure WebSocket server in Python
When a web app needs something from an external server, the client sends a request to that server, the server responds, and the connection is subsequently closed. However, bi-directional communication lets the server independently push data to the client every time it updates. This type of connection uses the WebSocket protocol, and today we’ll learn to build a secure WebSocket server using Python and JavaScript.
1 MIN READ
arrow_forward
CYBERSECURITY
Announcing organizational updates to better serve our customers
Earlier today, we informed the Snyk team of important recent organizational updates to better serve our customers and improve operational efficiency in order to support our continued growth. In the spirit of transparency to our customers, investors and partners, we are also sharing this internal memo below.
1 MIN READ
arrow_forward
CYBERSECURITY
Reflecting on Pride Month 2022 at Snyk
As Pride Month 2022 wraps up, we want to take a moment to highlight and reflect on of the events and activities Snyk hosted in celebration of Pride.
1 MIN READ
arrow_forward
CYBERSECURITY
Wiz extends CNAPP leadership with protection for Alibaba Cloud
Support for Alibaba Cloud follows just weeks after launch of Oracle Cloud Infrastructure (OCI) integration, providing organizations the broadest coverage of any cloud native application protection platform (CNAPP)
1 MIN READ
arrow_forward
CYBERSECURITY
Announcing customized role-based access controls for Snyk
We’re pleased to announce Snyk’s new role-based access management capabilities, providing admins with greater flexibility in managing Snyk access in your organization!
1 MIN READ
arrow_forward