FEATURED REPORT
Best practices for containerizing Python applications with Docker
In this post, we’ll attend to those concerns and take a look at some 6 best practices when containerizing Python applications with Docker.
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
ChaosDB explained: Azure's Cosmos DB vulnerability walkthrough
This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of several thousand Microsoft Azure customers.
1 MIN READ
arrow_forward
CYBERSECURITY
How we broke the cloud with two lines of code: the full story of ChaosDB
A summary and recording of Wiz’s talk at BlackHat Europe 2021: the full extent of ChaosDB, the impact it had, and the questions it raises about security in managed cloud services.
1 MIN READ
arrow_forward
CYBERSECURITY
Prisma Data Proxy (Discontinued): Serverless Database Access
The Prisma Data Proxy was Prisma’s connection pooling service for serverless apps. It has been discontinued: Prisma Postgres now includes built-in connection pooling for serverless and edge apps.
1 MIN READ
arrow_forward
CYBERSECURITY
Scanning ARM templates for misconfigurations with the Snyk CLI
Given the massive demand for and popularity of Azure Resource Manager (ARM), we are excited to announce you can now use Snyk Infrastructure as Code to scan ARM JSON files against our comprehensive set of security rules in the Snyk CLI.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk IaC wins 2021 CRN Tech Innovator Award & continues to grow channel business
We’re very excited to say that this week Snyk Infrastructure as Code (IaC) was named the winner of the cloud security category for the 2021 CRN Tech Innovator award.
1 MIN READ
arrow_forward
CYBERSECURITY
How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint
Learn how to detect and prevent the Trojan Source vulnerability in your JavaScript ecosystem. This attack relies on reviewers confusing the obfuscated malicious source code with comments.
1 MIN READ
arrow_forward
CYBERSECURITY
How Snyk Code prioritizes vulnerabilities using their Priority Score
Snyk’s Priority Scores are more than just a number. Learn about the thinking process behind the score as well as give you some practical tips on how to use it optimally to prioritize your vulnerabilities.
1 MIN READ
arrow_forward
CYBERSECURITY
How Datto made developer-first security a reality with Snyk
Learn about Datto’s nearly painless adoption of developer-first security and how it offers a model nearly any company can follow at a time when developing safe software with speed has never been more critical.
1 MIN READ
arrow_forward
CYBERSECURITY
6 big AWS IAM vulnerabilities – and how to avoid them
Cloud misconfigurations can lead to breaches and security failures — especially when the vulnerability is related to Identity and Access Management (IAM).
1 MIN READ
arrow_forward
CYBERSECURITY
Exploring extensions of dependency confusion attacks via npm package aliasing
Learn about a new extension to dependency confusion which has its premise on npm’s package aliasing capabilities.
1 MIN READ
arrow_forward
CYBERSECURITY
Lessons learned from improving full-text search at Snyk with Elasticsearch
We’re currently moving the “issues” tab of Snyk reports over to Elasticsearch. Read what we learned about in terms of analyzers, tokenizers, and search in the process.
1 MIN READ
arrow_forward