Brian Vermeer
3,993 viewsWhat is RAG, and How to Secure It
The implementation of RAG introduces security considerations. Risks such as prompt injection, data poisoning, access control gaps, and data …
Category
Snyk
Brian Vermeer
3,993 views
Brian Vermeer
3,490 viewsCreating SBOMs with the Snyk CLI
The software bill of materials (SBOM) is quickly becoming an essential aspect of open source security and compliance. In this post, we'll …
Brian Vermeer
6,856 viewsThe Persistent Threat: Why Major Vulnerabilities Like Log4Shell and Spring4Shell Remain Significant
A lurking issue has been surprisingly overlooked: the continued use of vulnerable Log4j and Spring Framework versions in many projects.
Brian Vermeer
6,309 viewsFour Easy Ways to Analyze your Java and Kotlin Code for Security Problems
Nowadays, the security of your applications is just as important as the functionality they provide. Therefore, analyzing your code for …
Brian Vermeer
7,323 viewsSecuring Symmetric Encryption Algorithms in Java
Encryption is converting readable data or plaintext into unreadable data or ciphertext, ensuring that even if encrypted data is intercepted, …
Brian Vermeer
7,741 viewsHandling security vulnerabilities in Spring Boot
Keeping your dependencies in check is crucial to ensure that your Spring Boot projects run smoothly and remain resilient in the face of …
Brian Vermeer
7,177 viewsUsing JLink to create smaller Docker images for Spring Boot apps
An in-depth exploration of utilizing JLink to optimize Docker image sizes, enhancing application security and performance.
Brian Vermeer
8,536 viewsSnakeYaml 2.0: Solving the unsafe deserialization vulnerability
In December of last year, we reported CVE-2022-1471 to you. This unsafe deserialization problem could easily lead to arbitrary code …
Brian Vermeer
5,743 viewsPreventing Cross-Site Scripting (XSS) in Java with Snyk Code
By taking a proactive approach to XSS prevention and using the right resources and tools, developers can help ensure the security and …
Marit van Dijk
10,847 viewsUsing Bots to Keep Dependencies Updated
Did you know bots can automatically create pull requests to keep dependencies secure and up to date? Find out here!