Category index

Cyber Security

4276 articles

4276 ARTICLES

FEATURED REPORT

Automatic SBOMs with ko

Generate automatic SBOMs with ko to enhance software supply chain security for Go applications.

BY —

MIN READ 1 MIN READ

EXPLORE north_east

CYBERSECURITY

Using the Snyk Vulnerability database to identify projects for The Big Fix

Use the Snyk Vulnerability database to help you find an opportunity to make an open source contribution to The Big Fix!

1 MIN READ arrow_forward

CYBERSECURITY

Teaming up with Sysdig to deliver developer and runtime Kubernetes security

Snyk has partnered with Sysdig to build a combined solution that addresses security across the DevOps process, from code to Kubernetes cluster.

1 MIN READ arrow_forward

CYBERSECURITY

sigstore, the local way

Build and run Sigstore locally to easily sign and verify container images without external dependencies.

1 MIN READ arrow_forward

CYBERSECURITY

Case study: Python RCE vulnerability in Celery

I conducted research based upon existing Python vulnerabilities and identified a common software pattern between them. This led to the discovery of a stored command injection vulnerability in Celery.

1 MIN READ arrow_forward

CYBERSECURITY

Security implications of Kubernetes operators

A look at Kubernetes operators and their implications for security, outlining potential security risks, discussing how to use operators with security in mind ,and examining how the right operators can lead to a more secure environment.

1 MIN READ arrow_forward

CYBERSECURITY

Automating Terraform security in Scalr deployments with Regula [Tutorial]

Regula enables cloud teams to evaluate Terraform, CloudFormation, Azure Resource Manager, and Kubernetes Infrastructure-as-Code (IaC) for security and compliance violations prior to deployment. Regula is an open source implementation of Rego, the query language used by the Open Policy Agent (OPA) project.

1 MIN READ arrow_forward

CYBERSECURITY

SAST and SCA: Better together with Snyk

SAST and SCA are better when you use them together. Secure your code and dependencies at the same time with Snyk.

1 MIN READ arrow_forward

CYBERSECURITY

Lessons learned from the Argo CD zero-day vulnerability (CVE-2022-24348)

Learn about the Argo CD vulnerability (CVE-2022-24348), as well as the larger implications regarding securing yourself against the kind of supply chain attack this vulnerability could have caused.

1 MIN READ arrow_forward

CYBERSECURITY

Microservices security: 6 best practice tips

Learn more about the unique requirements for microservices security architecture to keep your systems and applications secure.

1 MIN READ arrow_forward

CYBERSECURITY

Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz

For each CVE, the Wiz Research team maintains data from multiple threat intelligence sources and our own independent research. Now that we’ve added support for the new CISA KEV catalog, learn how you can use it in your cloud environment.

1 MIN READ arrow_forward

CYBERSECURITY

Keyless signing with Tekton on Amazon EKS

Keyless signing with Tekton on Amazon EKS simplifies software signing and enhances security in your Kubernetes pipelines.

1 MIN READ arrow_forward