What is RAG, and How to Secure It
The implementation of RAG introduces security considerations. Risks such as prompt injection, data poisoning, access control gaps, and data …
Snyk
Creating SBOMs with the Snyk CLI
The software bill of materials (SBOM) is quickly becoming an essential aspect of open source security and compliance. In this post, we'll …
The Persistent Threat: Why Major Vulnerabilities Like Log4Shell and Spring4Shell Remain Significant
A lurking issue has been surprisingly overlooked: the continued use of vulnerable Log4j and Spring Framework versions in many projects.
Four Easy Ways to Analyze your Java and Kotlin Code for Security Problems
Nowadays, the security of your applications is just as important as the functionality they provide. Therefore, analyzing your code for …
Securing Symmetric Encryption Algorithms in Java
Encryption is converting readable data or plaintext into unreadable data or ciphertext, ensuring that even if encrypted data is intercepted, …
Handling security vulnerabilities in Spring Boot
Keeping your dependencies in check is crucial to ensure that your Spring Boot projects run smoothly and remain resilient in the face of …
Using JLink to create smaller Docker images for Spring Boot apps
An in-depth exploration of utilizing JLink to optimize Docker image sizes, enhancing application security and performance.
SnakeYaml 2.0: Solving the unsafe deserialization vulnerability
In December of last year, we reported CVE-2022-1471 to you. This unsafe deserialization problem could easily lead to arbitrary code …
Preventing Cross-Site Scripting (XSS) in Java with Snyk Code
By taking a proactive approach to XSS prevention and using the right resources and tools, developers can help ensure the security and …
Using Bots to Keep Dependencies Updated
Did you know bots can automatically create pull requests to keep dependencies secure and up to date? Find out here!