Kubernetes posture management - no time to waste time
Five months ago, we decided to release a posture management solution for K8s and make it open source for everyone to enjoy it.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Log4Shell PoC exploit and mitigation demo on Kubernetes
Demonstration of an RCE against the Log4Shell / CVE-2021-44228 vulnerability on a PoC Java EE app running on Kubernetes. I also go over a few mitigation steps you can take to reduce your exposure to this and other such exploits. References mentioned in the video: Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and more.
It takes a community: Responding to open source criticism post-Log4Shell
The last week has been a wild ride for just about everyone in the technology world due to the public disclosure of the Log4Shell vulnerability. As a developer security company, Snyk has built our business around proactive automation to identify and fix security issues in applications. To say we’ve been busy this week would be an understatement.
Why Energy Infrastructure is National Security and How to Protect It
I am writing this from my home office in Texas. Texas isn’t just my home. It is the home of the best brisket on the planet, some of the most iconic high tech brands in the world, and energy production that powers the global economy. In the morning, I might meet with one of the fastest growing SaaS companies in the country about achieving the rigorous FedRAMP certification so they can sell to federal agencies.
Catching Log4j in the Wild: Find, Fix and Fortify
At many organizations, the surprise discovery that the widely used Apache log4j open source software has harbored a longtime critical vulnerability was as if Scrooge and the Grinch had teamed up for the biggest holiday heist of all. Incident response teams across the globe have scrambled to remediate thousands, if not millions of applications. “For cybercriminals this is Christmas come early,” explained Theresa Payton, former White House CIO and current CEO of Fortalice Solutions.
AWS Live Hack Workshop: Snyk and Terraform
In this video, we show a live demonstration of the EKS default settings when deploying with Terraform. Learn how small misconfigurations can create unwanted side effects and may put clusters at risk of EKS security issues as well as how you can test and remediate.
JavaScript type confusion: Bypassed input validation (and how to remediate)
Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and more.
AWS Live Hack Workshop: Snyk and Docker
In this live demo with Snyk and Docker, we show you how to scan containerized applications on Amazon EKS using a Docker CLI tool developed by both Docker and Snyk, managing open source vulnerabilities and dependencies introduced by container base images.
AWS Live Hack Workshop: Snyk and StackHawk
In this video with Snyk and Stackhawk, you'll see a live demo on implementing automated static and dynamic security testing across a CircleCI pipeline, finding and fixing vulnerabilities without loss of performance or developer agility.
What Financial Services Companies Need to Know About Infrastructure Access
Ding. That is the sound of the elevator opening on the ground floor of the One WTC building in New York. We’re both there for a meeting. You, as Director of Systems Engineering for a Financial Services provider, are presenting your plans to shore up the hybrid infrastructure used to run the bank’s new crypto-based services. I’m meeting with clients who are trying to rebuild their reputation, and SOC2 certification, after a data breach.