# applicationsecurity

4 min read

SnykSec for Snyk

Jan 9 '23

You should be using HTTP Strict Transport Security (HSTS) headers in your Node.js server

#applicationsecurity #ecosystems #engineering

7 min read

SnykSec for Snyk

Jan 11 '23

5 “no experience needed” tips for building secure applications

#applicationsecurity #opensource

5 min read

SnykSec for Snyk

Dec 20 '22

5 best practices for React with TypeScript security

#applicationsecurity #ecosystems

7 min read

Liran Tal for Snyk

Dec 6 '22

How to verify and secure your Mastodon account

#applicationsecurity #engineering

4 min read

SnykSec for Snyk

Dec 5 '22

10 AWS security considerations when migrating

#applicationsecurity #cloudnativesecurity #devsecops

6 min read

SnykSec for Snyk

Nov 28 '22

How to use GitHub Actions environment variables

#applicationsecurity #devsecops #engineering

7 min read

SnykSec for Snyk

Nov 28 '22

How to write tests in Python using doctest

#applicationsecurity #engineering

4

5 min read

SnykSec for Snyk

Nov 28 '22

Writing unit tests in Java

#applicationsecurity

7 min read

SnykSec for Snyk

Nov 28 '22

Setting up SSL/TLS for Kubernetes Ingress

#applicationsecurity #devsecops

10 min read

SnykSec for Snyk

Nov 28 '22

Dependency injection in JavaScript

#applicationsecurity #dependencyhealth

8 min read

SnykSec for Snyk

Nov 28 '22

5 best practices for building modern access control for cloud applications

#applicationsecurity #cloudnativesecurity

5 min read

SnykSec for Snyk

Nov 14 '22

Implementing TLS in Java

#applicationsecurity #ecosystems

9 min read

Liran Tal for Snyk

Nov 16 '22

NPM security: preventing supply chain attacks

#applicationsecurity #opensource

15 min read

SnykSec for Snyk

Nov 14 '22

Breaking down the ‘critical’ OpenSSL vulnerability

#applicationsecurity #vulnerabilities

7 min read

SnykSec for Snyk

Nov 28 '22

A day in the life of a CISO: Chris Hughes of Aquia

#applicationsecurity #devsecops

4 min read

SnykSec for Snyk

Nov 14 '22

Secure Python URL validation

#applicationsecurity #opensource

7 min read

SnykSec for Snyk

Nov 14 '22

Update: OpenSSL high severity vulnerabilities

#applicationsecurity #engineering #opensource #vulnerabilities

4 min read

SnykSec for Snyk

Nov 14 '22

Ruby on Rails Docker for local development environment

#applicationsecurity

8 min read

Brian Vermeer 🧑🏼‍🎓🧑🏼‍💻 for Snyk

Nov 1 '22

How to create SBOMs in Java with Maven and Gradle

#applicationsecurity #java #security

8 min read

SnykSec for Snyk

Nov 14 '22

Top 5 scary AWS misconfigurations

#applicationsecurity #cloudnativesecurity

4 min read

Eric Smalling for Snyk

Oct 11 '22

Container images simplified with Ko

#applicationsecurity #dependencyhealth

14 min read

TutorialBoy

Oct 29 '22

A Talk About Java Serialization and Deserialization

#applicationsecurity #java

6 min read

TutorialBoy

Oct 29 '22

How to Fix MSDT Vulnerability using SCCM and Intune | CVE-2022-30190

#applicationsecurity #poc

7 min read

SnykSec for Snyk

Nov 14 '22

Why fuzzing tools should be part of your security toolkit

#applicationsecurity #devsecops

7 min read

SnykSec for Snyk

Nov 14 '22

Node.js multithreading with worker threads series: worker_threads tutorial

#applicationsecurity #engineering

10 min read

SnykSec for Snyk

Oct 24 '22

Secure JavaScript URL validation

#applicationsecurity #engineering

8 min read

SnykSec for Snyk

Oct 18 '22

Implementing TLS/SSL in Python

#applicationsecurity #engineering

6 min read

SnykSec for Snyk

Oct 18 '22

Improving code quality with linting in Python

#applicationsecurity

7 min read

SnykSec for Snyk

Oct 18 '22

Security lessons with a Snyk Ambassador

#applicationsecurity #dependencyhealth #opensource

5 min read

SnykSec for Snyk

Oct 10 '22

Red teams vs blue teams: Breaking down security roles

#applicationsecurity #devsecops #engineering

5 min read

SnykSec for Snyk

Nov 14 '22

Why developers hold the key to cloud security

#applicationsecurity #cloudnativesecurity #cloudsecurity #iac

6 min read

SnykSec for Snyk

Nov 14 '22

How Snyk can help secure supply chains per Executive Order M-21-30

#applicationsecurity #devsecops #licenseviolations

8 min read

Liran Tal for Snyk

Sep 27 '22

How to install Ruby in a macOS for local development

#applicationsecurity #ecosystems #opensource

7 min read

SnykSec for Snyk

Nov 14 '22

Looking back at Black Hat USA 2022

#applicationsecurity #snykteam

5 min read

SnykSec for Snyk

Sep 19 '22

Avoiding SMTP Injection: A Whitebox primer

#applicationsecurity #dependencyhealth #vulnerabilities

7 min read

SnykSec for Snyk

Sep 12 '22

Using Kubernetes ConfigMaps securely

#applicationsecurity

7 min read

SnykSec for Snyk

Sep 12 '22

Best practices for API gateway security

#applicationsecurity

6 min read

SnykSec for Snyk

Sep 12 '22

How to find and fix XML entity vulnerabilities

#applicationsecurity #vulnerabilities

9 min read

SnykSec for Snyk

Sep 12 '22

Solve Hack the Box and other CTF challenges with Snyk

#applicationsecurity #dependencyhealth

8 min read

SnykSec for Snyk

Sep 5 '22

Best practices for containerizing .net applications

#applicationsecurity #opensource

9 min read

SnykSec for Snyk

Sep 5 '22

Best practices for container isolation

#applicationsecurity

7 min read

SnykSec for Snyk

Sep 5 '22

Applying the principle of least privilege to Kubernetes using RBAC

#applicationsecurity #kubernetes #rbac

1

7 min read

Brian Vermeer 🧑🏼‍🎓🧑🏼‍💻 for Snyk

Sep 2 '22

Best practices for managing Java dependencies

#applicationsecurity #opensource #java #security

8 min read

Liran Tal for Snyk

Sep 29 '22

A definitive guide to Ruby gems dependency management

#applicationsecurity #opensource

11 min read

Vickie Li for ShiftLeft

Jan 13 '22

Detecting log4j using ShiftLeft CORE

#cybersecurity #applicationsecurity #opensource #softwaredevelopment

6

2 min read

Vickie Li for ShiftLeft

Feb 1 '22

Best Practices for Application Security in the Cloud

#cybersecurity #applicationsecurity #softwaredevelopment #devsecops

8 min read

Surhid Amatya

Nov 26 '21

Mobile Security: OWASP List

#android #mobiledevelopment #security #applicationsecurity

3 min read

Warren Parad

Nov 9 '20

Validating JWTs in Web APIs

#jwt #authentication #applicationsecurity #microservices

17

2 min read

Niraj Kumar

Sep 5 '20

Application Security Best Practices / Defensive Programming

#defensiveprogramming #applicationsecurity #bestpractices #securitybestpractices

21

12 min read

Warren Parad for Authress Engineering Blog

Jul 12 '20

How to secure a multitenant application architecture

#architecture #applicationsecurity #microservices #software

22

4 min read

sachindra@work

Apr 11 '20

All about SIEM

#applicationsecurity #security

2 min read

Katie McCaskey for Sonatype

Apr 3 '20

Ryan Lockard Names the Seven Deadly Sins of DevSecOps

#appsec #applicationsecurity #devsecops #newsandviews

1 min read

Katie McCaskey for Sonatype

Mar 30 '20

Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis

#vulnerabilities #security #appsec #applicationsecurity

1 min read

Tanya Janca for Microsoft Azure

Sep 20 '19

Pushing Left, Like a Boss - Part 7: Code Review and Static Code Analysis

#applicationsecurity #appsec #beginners #security

49

1 min read

Tanya Janca for Microsoft Azure

Sep 19 '19

Pushing Left, Like a Boss - Part 6: Threat Modelling

#applicationsecurity #tutorial #beginners #appsec

18

1 min read

Tanya Janca for Microsoft Azure

Sep 19 '19

Pushing Left, Like a Boss, Part 5.14 Secure Coding Summary

#applicationsecurity #tutorial #beginners #appsec

17

1 min read

Eric

May 9 '19

Developers need to stop fearing the InfoSec Mafia

#security #appsec #infosec #applicationsecurity

10

1 min read

Tanya Janca for Microsoft Azure

May 4 '19

Pushing Left, Like a Boss — Part 5.1 — Input Validation, Output Encoding and Parameterized Queries

#applicationsecurity #tutorial #beginners #security

11

1 min read

Px Mx

Apr 19 '19

Simple Tool for Testing CVE Mitigation in Web Apps

#security #applicationsecurity #vulnerability #testing

9