FEATURED REPORT
Enterprise security best practices for managing vulnerabilities at scale
How do you ensure effective security compliance across several teams when they experience an overwhelming number of vulnerabilities that need to be addressed?
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
How we promote inclusivity in our job descriptions
Though it might seem a small step towards promoting D&I within our culture, creating inclusive job descriptions is something Snyk is focused on putting time into, and getting right.
1 MIN READ
arrow_forward
CYBERSECURITY
Node.js security: lessons from the Node.js Security Working Group in triaging vulnerabilities
This vulnerability report highlights several challenges that we face in the Node.js Security Working Group as security analysts who need to respond to security incidents.
1 MIN READ
arrow_forward
CYBERSECURITY
Developing secure software: how to implement the OWASP top 10 Proactive Controls
This post discusses the OWASP Top 10 proactive controls and how to incorporate them into our web applications.
1 MIN READ
arrow_forward
CYBERSECURITY
Privileged Docker containers—do you really need them?
Even when running rootless, it’s always good practice to understand exactly what your container needs, and only give it those minimum permissions.
1 MIN READ
arrow_forward
CYBERSECURITY
A Visual Interface for Your Database | Prisma Studio
Prisma Studio is a visual database browser for viewing and editing application data, with filtering, pagination, and relation-aware workflows for Prisma projects.
1 MIN READ
arrow_forward
CYBERSECURITY
Tips to scale your DevSecOps organization from Gene Kim and Guy Podjarny
During SnykCon 2020, author and researcher Gene Kim sat down with Snyk co-founder and President Guy Podjarny and a small group of Snyk VIPs to talk about (Sec)DevOps—where we started, how far we’ve come, and strategies for getting the most value out of the practice. This post contains a few of the most interesting takeaways from the conversation.
1 MIN READ
arrow_forward
CYBERSECURITY
The new, improved Snyk Container CLI
Snyk has had the ability to test your Docker images using our CLI for over a year now. With the latest release of the CLI, we’re improving the user experience for container users, as well as adding a few more useful features for advanced users.
1 MIN READ
arrow_forward
CYBERSECURITY
How Atlassian CISO Adrian Ludwig built a world-class product security team
At last week’s SnykCon, Snyk’s Co-founder and President Guy Podjarny sat down with Adrian Ludwig, CISO of Atlassian for a fireside chat about the modern security market, how his security team is structured, and how to help developers embrace security.
1 MIN READ
arrow_forward
CYBERSECURITY
Preview Support for Microsoft SQL Server | Prisma 2.10
Prisma 2.10 added preview support for Microsoft SQL Server, expanding Prisma’s database coverage for teams building with SQL Server.
1 MIN READ
arrow_forward
CYBERSECURITY
Key approaches for effective security risk management & prioritization
“The safest thing is to do nothing” is a great cliche, but in the case of software security, this is almost never the case. Starting with the very first line of code we write, the line has been crossed—we have introduced security risk that needs to be managed.
1 MIN READ
arrow_forward
CYBERSECURITY
Regular Expression Denial of Service (REDoS) in UAParser.js
Welcome to the Snyk Monthly Vulnerability Profile. This month we’re looking at a Regular Expression Denial of Service (REDoS) vulnerability discovered in the popular UAParser JavaScript package.
1 MIN READ
arrow_forward