4276 articles
4276 ARTICLES
A focus on attacks in the Node.js ecosystem via the yarn and npm package managers, examining how configuration abuse and hidden characters can lead to RCE.
Introducing apko, a tool for building minimal, secure, and reproducible “distroless” container images from Alpine Linux, enhancing software supply chain security
During our Big Fix-a-Thon earlier today, we announced that we’ve taken two initial actions as a company in direct response to the unfolding crisis in Ukraine.
In honor of Black History Month, we sat down with three members of Black@Snyk, our employee resource group for Black employees and allies, to learn more about their personal stories.
The Adobe patch for CVE-2022-24086 wasn’t enough to mitigate the code. This led to a new CVE-2022-24087 being raised and a second patch going into production.
Transitioning from SDLC to SSDF: Learn about the new Secure Software Development Framework and how it enhances software security practices.
Snyk is proud to launch a new Global Service Provider program designed to give leading solution providers the resources they need to bring our developer-first tools and methodologies into their services and support customers on their DevSecOps journey.
Even a non-technical person (like me) could be part of The Big Fix, and actively contribute to this global effort to make the internet a safer place.
Join us for an epic 24-hour livestream on February 25th to celebrate The Big Fix 2022, featuring expert guests from around the world.
SnykCon 2021 gave us insights on how developers have shifted the industry and forged a new and improved approach to software development.
Snyk’s developerSteve shares insight on understanding and fixing the CVE-2022-24086 Magento Ecommerce vulneratbility.
We’re excited to announce that Snyk has acquired Fugue. Combining the platforms of Snyk and Fugue enables us to offer security resources extending from code through cloud configurations.