4276 articles
4276 ARTICLES
On August 19th, 2019 rest-client, a simple HTTP and REST client for Ruby, reported a new security threat. A maintainer’s RubyGem account was compromised and a malicious third party installed a code execution back door. The exploit affects versions greater than 1.6.10 and less than 1.7.0.rc1.
On July 29th, 2019 a high severityDeserialization of Untrusted Data vulnerability (CVE-2019-14379,CVE-2019-14439) affecting all versions of com.fasterxml.jackson.core:jackson-databind up to 2.9.9.2 was published.
On August 17, 2019, the Webmin team announced the release of Webmin 1.930 and Usermin 1.780. These releases address a newly discovered remote command execution vulnerability found in Webmin versions 1.890 through 1.920. This vulnerability has been present for more than a year and was introduced by a malicious third party.
We’re excited to share that starting today, you can make sure that vulnerable artifacts will not be used in your organization by using Snyk’s Artifactory plugin!
We’re excited to announce that Snyk has partnered with CircleCI to help you use open source and stay secure.
I examined Eclipse IDE plugins and then narrowed it down to the top 10 most helpful plugins that I have added to my own toolkit.
The Guild took over development of GraphQL CLI and related libraries, helping ensure their continued growth and maintenance.
Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications, and is the largest project in the CNCF ecosystem.
We are excited to share that starting today, developers can test and monitor their Go projects, which use modules, for open source vulnerabilities and get precise and accurate package-level alerts.
The first question many customers ask us after purchasing Snyk is—now how do we roll out the product throughout the company? In this post, we’ll outline some best practices for getting started with Snyk at your organization.
Snyk is excited to share that we’ve recently added new integrations with your container registries, including Amazon Elastic, Google and Microsoft Azure container registries (ECR, GCR, ACR).
This is a technical exploration of how the Capital One breach might have occurred, based on the evidence we have from the criminal complaint.