FEATURED REPORT
Defining developer-first container security
We’re excited to announce our ability to automate fix PRs for containers, following on to our recent announcement of elevating Dockerfiles to first-class status in your git repos.
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
Prisma Migrate is Production Ready - Hassle-Free Database Migrations
Prisma Migrate is ready for use in production - Database schema migration tool with declarative data modeling and auto-generated, customizable SQL migrations
1 MIN READ
arrow_forward
CYBERSECURITY
Docker Hub authentication: Is 2021 the year you enable 2FA on Docker Hub?
In October 2019, in order to improve the Docker Hub authentication mechanism, Docker rolled out a beta release of two-factor authentication (also known as 2FA).
1 MIN READ
arrow_forward
CYBERSECURITY
Solving Java security issues in my Spring MVC application
For this article, I created a Spring MVC application with JSP web pages that runs on a tomcat server. Although the code works perfectly, I did make some security-related mistakes. Let’s see how we can detect these mistakes in my Spring MVC application performing Java static code analyses and how to fix them.
1 MIN READ
arrow_forward
CYBERSECURITY
How I was hacking docker containers by exploiting ImageMagick vulnerabilities
In this article, I’ll take you through a step-by-step process of container hacking, in which we will exploit a Node.js-based web application that uses a vulnerable, yet official, Docker base image for Node.js.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk expands into Asia Pacific Japan
At the beginning of 2021, I noted that Snyk was ready to soar. And soar we have…the rocket ship’s next stop? Asia Pacific and Japan (APJ).
1 MIN READ
arrow_forward
CYBERSECURITY
Our Journey to Today
Today we came a step closer towards our ultimate vision - to empower every one of the world’s 27 million developers to develop fast while staying secure.
1 MIN READ
arrow_forward
CYBERSECURITY
10 Kubernetes Security Context settings you should understand
In this cheatsheet, we will take a look at the various securityContext settings, explore what they mean and how you should use them.
1 MIN READ
arrow_forward
CYBERSECURITY
Automating vulnerability monitoring with Snyk, Prometheus and Grafana
This article is part 3 of Snyk API Wednesdays - our new blog series covering different Snyk API use cases and customer stories. Part 1 covered the Snyk-Watcher by Twilio, and part 2 covered a new integration with Opsgenie using custom webhooks.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk’s new vulnerability cards - fix issues fast with a new look and feel
We’re excited to announce that we’ve redesigned Snyk’s issue cards to significantly improve its usability and value. It’s more than a fresh coat of paint and we haven’t taken anything out, but we’ve added value and feng shui’d the card considerably.
1 MIN READ
arrow_forward
CYBERSECURITY
SolarWinds Orion Security Breach: A Shift In The Software Supply Chain Paradigm
in this article, we’ll walk through the lessons learned from SolarWinds Orion security breach.
1 MIN READ
arrow_forward
CYBERSECURITY
Java configuration: how to prevent security misconfigurations
Security misconfiguration is part of the infamous OWASP top 10 vulnerability list and has a prominent spot on place 6.
1 MIN READ
arrow_forward