FEATURED REPORT
New Datamodel Syntax: Improved Schema Control & Simpler Migrations
Prisma’s new datamodel syntax gave developers more control over database schemas while simplifying migrations and reducing opinionated defaults.
Category index
Cyber Security
4276 articles
4276 ARTICLES
CYBERSECURITY
After three years of silence, a new jQuery prototype pollution vulnerability emerges once again
On March 26th, 2019, almost three years after the last jQuery security vulnerability was disclosed, we recently learned about a new security vulnerability affecting the same popular jQuery frontend library.
1 MIN READ
arrow_forward
CYBERSECURITY
Prisma Day 2019 - community conference on modern app development
Prisma Day 2019 brought the Prisma community together in Berlin for talks on modern app development, databases, and Prisma in production.
1 MIN READ
arrow_forward
CYBERSECURITY
Cheat sheet: 10 Bitbucket security best practices
In this cheat sheet we’ll cover how you can be more secure as a Bitbucket user or contributor. Some of it is specific to Bitbucket, but a lot of it is also useful for other Git and non-Git repositories as well.
1 MIN READ
arrow_forward
CYBERSECURITY
Enriched content on Snyk’s publicly available vulnerability database
Our publicly available Vulnerability DB is one such example, and has recently undergone some improvements — making it even more powerful as an aid to security.
1 MIN READ
arrow_forward
CYBERSECURITY
Securing Bitbucket Cloud with Snyk
We are excited to share that starting today, developers can import, test, fix and monitor their Bitbucket Cloud projects for open source vulnerabilities. Being developer-focused, Snyk is the only solution to provide native testing and fixing of open source dependencies for Bitbucket Cloud.
1 MIN READ
arrow_forward
CYBERSECURITY
Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem
On March 26, 2019, a malicious version of the popular bootstrap-sass package, that has been downloaded a total of 28 million times to date, was published to the official RubyGems repository.
1 MIN READ
arrow_forward
CYBERSECURITY
Introducing experimental integrity policies to Node.js
A recent experimental feature for introducing integrity policies landed in Node.js core 11.8.0. This capability, shipped in non LTS version yet, provides integrity checks for a Node.js runtime when modules are being loaded, in order to verify that the modules code haven’t been tampered with.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk joins the Continuous Delivery Foundation as a founding member.
With our integrations and plugins for leading CI/CD platforms, Snyk enables a further, more DevOps-focused security gate through the pipeline.
1 MIN READ
arrow_forward
CYBERSECURITY
How Prisma and GraphQL fit together | Prisma
Learn how Prisma and GraphQL fit together, where Prisma goes beyond GraphQL use cases, and how Prisma simplifies database workflows across APIs.
1 MIN READ
arrow_forward
CYBERSECURITY
What is package lock json and how a lockfile works for yarn and npm packages?
In this article we will discuss both npm’s package lock file package-lock.json as well as Yarn’s _yarn.lock.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyking in - regular expression denial of service vulnerability exploit in the ms package
Welcome to another edition of our Snyking In exploit series! In this episode, we’ll be looking at the regular expression denial of service vulnerability, demonstrating how it can be exploited, as well as the potential risk they pose to your data and systems.
1 MIN READ
arrow_forward