Articles by Tag #codesecurity
Browse our collection of articles on various topics related to IT technologies. Dive in and explore something new!
Preventing SQL injection in C# with Entity Framework
In this blog, we'll discuss strategies to protect your C# code from SQL injection.
Automatically fix code vulnerabilities with AI
Explore Snyk Deep Code AI Fix (DCAIF), a game-changer for developers. Unlike generative AI assistants that may introduce security vulnerabilities, DCAIF leverages a hybrid AI model to automatically fix common security issues like XSS right in your IDE.
Essential Node.js backend examples for developers in 2024
Boost your Node.js skills with these backend code snippets for 2024. Copy and paste them into your own projects to save time when building backends.
Preventing broken access control in express Node.js applications
In this article, you'll learn more about broken access control in Node.js applications and strategies to prevent such vulnerabilities when building web applications based on the Express web framework.
Finding and fixing exposed hardcoded secrets in your GitHub project with Snyk
In this blog, we'll show how you can use Snyk to locate hardcoded secrets and credentials and then refactor our code to use Doppler to store those secrets instead.
Unburdening Developers From Vulnerability Fatigue with Snyk Delta Findings
Tired of endless security alerts? Snyk Delta Findings in the IDE helps developers cut through the noise and focus on *new* vulnerabilities introduced in their code. Reduce vulnerability fatigue and ship secure software faster. Get started for free!
How to mitigate SSRF vulnerabilities in Go
Dive into Server-Side Request Forgery (SSRF) vulnerabilities in Go applications and explore mitigation techniques. Learn how to secure your Go code and leverage tools like Snyk Code for proactive security.
Symmetric vs. asymmetric encryption: Practical Python examples
In this guide, we’ll discuss symmetric and asymmetric encryption, implement them in Python, and explore their best practices.
How to mitigate security issues in GenAI code and LLM integrations
Let's discuss how Snyk can help mitigate three common security issues in genAI code.
5 lý do các startup nên cân nhắc sử dụng Locker.io để quản lý secrets
Quản lý secrets luôn là một thách thức đối với các startup, đặc biệt khi quy mô phát triển nhanh và...
Breaking caches and bypassing Istio RBAC with HTTP response header injection
This post outlines what we believe to be novel attacks against HTTP application middleware based on the simple foundation of HTTP response header injection.
How to prevent log injection vulnerability in JavaScript and Node.js applications
Fortify your Node.js applications against log injection attacks! This guide dives deep into the dangers and solutions to protect your logs from malicious manipulation. Stop attackers and build secure Node.js applications today.
Identifying Insecure C Code with Valgrind and Fixing with Snyk Code
Discover how to secure your C and C++ code with Snyk. Learn about common vulnerabilities like memory leaks and buffer overflows in C and C++ and how Snyk’s static code analysis tool can help you identify and fix them. Protect your critical software from security threats.
Does Claude 3.7 Sonnet Generate Insecure Code?
Anthropic’s Claude 3.7 Sonnet shows improvements in secure code generation, but vulnerabilities like regex-based denial-of-service still emerge. See how it compares to other AI models and why Snyk’s security tools remain essential for developers.
Vulnerabilities in NodeJS C/C++ add-on extensions
In this blog post, we aim to provide an overview of common security vulnerabilities and vulnerable patterns that can occur when writing C/C++ add-ons in NodeJS.
What you should know about PHP code security
Let's discuss the importance of PHP security and the business impact of some notable PHP interpreter vulnerabilities that are crucial for developers to get right.
How to secure a REST API?
In this post, we'll discuss what REST APIs are and how to secure them.
Four easy ways to analyze your Java and Kotlin code
In this post, we'll cover four simple methods for finding security vulnerabilities in your Java and Kotlin code.
Can Snyk Detect JWT Security Issues?
How to detect and prevent JWT security risks? Follow Snyk’s JWT security best practices for enhanced security.
Revolutionizing Code Security: How Amazon Q Developer Safeguards Modern Applications
In today’s fast-paced digital landscape, where applications power everything from banking to...
ChatGPT and Secure Coding: Benefits and Security Vulnerabilities of ChatGPT-Generated Code
Using ChatGPT for coding has benefits but can also introduce security vulnerabilities. Learn more about ChatGPT and secure coding and how to offset risk here.
Analyze Taint Analysis Faster with Improved Contextual Dataflow in Snyk Code
Snyk Code's enhanced dataflow analysis simplifies vulnerability identification and remediation. Learn how this powerful tool streamlines the security process and saves developers valuable time.
Ultralytics AI Pwn Request Supply Chain Attack
Discover the details of the Ultralytics AI supply chain attack, a sophisticated two-phase breach targeting PyPI releases and GitHub Actions with cryptocurrency mining malware. Learn how to detect exposure, secure your projects, and protect against future vulnerabilities using tools like Snyk.
Vulnerability-Free C and C++ Development in Automotive Manufacturing and Software Defined Vehicles (SDV)
Look into the security challenges facing the booming Software-Defined Vehicle (SDV) market. While SDV promises exciting features and revenue streams, its reliance on C and C++ code, notorious for vulnerabilities, raises concerns.
Can Snyk Find Weak Cryptographic Algorithms? Bye Bye MD5
Weak encryption algorithms are cryptographic algorithms that provide inadequate security against attacks. Find out how Snyk Code can help find weak cryptographic algorithms and with weak cryptography testing.
Lottie Player npm package compromised for crypto wallet theft
On October 31st, 2024, another package compromise and cryptocurrency hijack story unfolded for a popular npm package. Scan open source dependencies and container images in the CLI or your SCM with Snyk to determine if you're using one of the vulnerable versions of lottie-player, and potentially uncover any other security vulnerabilities you may have in your projects.
Do not pass GO - Malicious Package Alert
Recently, researchers have found another Software Supply Chain issue in BoltDB, a popular database tool in the Go programming environment. The BoltDB Go Module was found backdoored and contained hidden malicious code.