Cyber Security

Cache poisoning in popular open source packages

This blog post provides an introduction to web cache poisoning and demonstrates why open source maintainers should take this issue into account.

What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm

Securing your Kubernetes application development with Snyk and Tilt

Developing Kubernetes applications can be hard. This is where tools like Tilt come in.

Applying risk management to DevOps practices with Snyk & Datadog

In this post, we’ll look at some common software risks, how to measure security risks, and how organizations can use Datadog and Snyk to automate risk management.

2020 Q4 in review—iOS remote code execution, developer-first SAST, and more

Welcome to the fourth of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.

2020 Q3 in review—Snyk & DeepCode, Angular security best practices, and more

Welcome to the third of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.

2020 Q2 in review—State of Open Source Security report, DevSecOps Hub, and more

Welcome to the second of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.

2020 Q1 in review—JVM ecosystem report, DevSecOps insights, and more

Welcome to the first of four posts in which we take a look back at all the highlights we have shared across the Snyk blog across 2020.

Golang security: access restriction bypass vulnerability in JWT

Back in July, the Snyk security team was alerted about a potential security issue in the JWT package. This package provides a Go implementation of JSON web tokens and the issue that was discovered related to a function called VerifyAudience that was not working as expected. This vulnerability is just one example out of hundreds of proprietary Golang security vulnerabilities uncovered this year by Snyk’s security research team. This article sheds some light on the processes used and the trends Snyk is seeing in this quickly growing popular ecosystem.

What makes Fastify a successful project?

Learn why we consider Fastify — the open source Node.js web application server— to be a health project.

Blazing the trail for cloud native application security

2020 was an incredibly challenging year for all of us but with the dawn of a new year just over the horizon, it’s a great opportunity as any to take a few moments to appreciate the work done by our engineering and product teams.