devopsy.kinsta.cloud

Tag: Snyk

  • New AWS Quick Start available to secure Amazon Elastic Kubernetes Service (Amazon EKS) workloads

    New AWS Quick Start available to secure Amazon Elastic Kubernetes Service (Amazon EKS) workloads

    Snyk Container’s Kubernetes monitor detects workloads as they are created or modified in EKS and then scans the underlying container image for vulnerabilities in order to provide fix recommendations for detected issues. As part of our EKS integration, we also alert you to potential configuration issues in the workload that could make your application easier to attack.”

    If you’ve read our previous articles on writing secure Kubernetes configurations or automating Kubernetes workload security reporting then you likely installed our Kubernetes integration manually on one or more of your Kubernetes clusters. Now you can take advantage of our 1-click deployment for Amazon EKS with three deployment options!

    To read more on this topic, click the link below:

    https://snyk.io/blog/secure-amazon-elastic-kubernetes-service-workloads/

  • The DevSecOps Journey When Migrating Your Containerized Applications to the AWS Cloud Platform

    The DevSecOps Journey When Migrating Your Containerized Applications to the AWS Cloud Platform

    Now more than ever, organizations are migrating on-premises workloads to the cloud. With the boost in agility and scalability that follows, companies can more easily support demand increases and fast delivery of new revenue-generating services. The business value impact is immediate, which is especially important in today’s challenging climate.

    In this webinar with AWS and CircleCI, Snyk’s Jay Yeras covers migrating a sample containerized application to Amazon Elastic Kubernetes Service (EKS), Amazon Elastic Container Service (ECS) and AWS Fargate to automate your development process quickly, safely, and at scale.

    To watch the full video, click the link below:

    https://www.youtube.com/watch?v=71WBdmudYwI&t=2s

  • AWS Vulnerability Scanning from Snyk

    AWS Vulnerability Scanning from Snyk

    Snyk empowers developers to own the security of their applications and containers with a scalable, developer-first approach to finding and fixing vulnerabilities. Snyk integrates seamlessly into existing workflows and provides automated remediation via its curated, best-in-class vulnerability database.

    To book a demo, click the link below:

    https://snyk.io/lp/aws-vulnerability-scanning-from-snyk/

     

  • Snyk achieves AWS Lambda Ready designation

    Snyk achieves AWS Lambda Ready designation

    We are excited to extend our partnership with AWS and announce we have achieved the AWS Lambda Ready designation, part of the Amazon Web Services (AWS) Service Ready Program. This designation recognizes that Snyk Open Source has demonstrated successful integration with AWS Lambda.

    Achieving the AWS Lambda Ready designation differentiates Snyk as an AWS Partner Network (APN) member with a product integrating with AWS Lambda and is generally available and fully supported for AWS customers. AWS Service Ready Partners have demonstrated success in building products integrated with AWS services, helping AWS customers evaluate and use their technology productively, at scale, and varying levels of complexity.

    To read more about this, click the link below:

    https://snyk.io/blog/snyk-aws-lambda-ready-designation/

  • Introducing Snyk for Serverless

    Introducing Snyk for Serverless

    Today we’re excited to announce Snyk’s new solution for securing your serverless functions, designed to easily integrate and protect serverless-based applications! The initial launch features tight integration with both AWS Lambda and Heroku. We’re also working closely with Google, Red Hat and others to integrate directly with their platforms in the coming months.

    To read more about Snyk’s new solution, click the link below:

    https://snyk.io/blog/launching-snyk-for-serverless/

  • How SME lender New10 uses AWS and Snyk to deliver quickly and securely

    How SME lender New10 uses AWS and Snyk to deliver quickly and securely

    “Snyk simplifies our continuous delivery pipelines by directly integrating security. Now, our pipelines are shorter, and new applications and features go into production faster. Ultimately, this means we can deliver value to the business faster and more securely.” – Kirill Kolyaskin, Lead Cloud Engineer at New10

    New10 is an online lender, leveraging the benefits of the most cutting-edge technology to offer a fully digital lending process to more than 1,000 customers.

    The FinTech scale up has deep roots in the AWS Cloud and uses AWS for loan administration, risk comprising services, customer information services and analytical services. New10 chose Snyk to integrate security best practices directly into their development pipelines. In this case study, we’ll share how New10 has leveraged both AWS and Snyk to deliver value to their customers faster and with security always at the forefront.

    To learn more about New10, click the link below:

    https://snyk.io/blog/how-sme-lender-new10-uses-aws-and-snyk-to-deliver-quickly-and-securely/

  • Serverless is great, but what about the security of my AWS Lambda functions and their dependencies?

    Serverless is great, but what about the security of my AWS Lambda functions and their dependencies?

    Function as a Service (FaaS) platforms patch your operating system dependencies for you, but do nothing to secure your application dependencies, such as those pulled from npm, PyPI, Maven and the likes. These libraries are just as prevalent and just as vulnerable as operating system dependencies, and you—the application owner—are responsible for upgrading or patching them when a vulnerability in them is disclosed.

    Furthermore, since attackers know that server dependencies at the operating system level, which are the responsibility of the cloud provider, are patched quickly, they will focus their attention on application code and application dependencies.

    To read more about this, click the link below:

    https://snyk.io/blog/serverless-is-great-but-what-about-the-security-of-my-aws-lambda-functions-and-their-dependencies/

  • Streamline Kubernetes security in Amazon Web Services

    Streamline Kubernetes security in Amazon Web Services

    Integration with Amazon Web Services Elastic Container Registry (ECR) is one of our most popular use cases with Snyk Container and so we’re happy to announce that we’ve made it simpler to integrate Snyk Container vulnerability scanning within your Amazon Elastic Kubernetes Service (EKS) and ECR services.

    To read and learn more about streamline Kubernetes security in AWS, click the link below:

    https://snyk.io/blog/streamline-kubernetes-security-in-amazon-web-services/

     

  • xs:code Releases the First Chrome Extension to Provide Intuitive Analytics and Vulnerability Reporting on Open Source Projects

    xs:code collaborates with Snyk to give users to view security issues with open source code

    Herzliya Israel, July 27, 2020 — xs:code, the marketplace for open source, today announced their new free chrome extension, xs:code Insights, which provides users with intuitive, in-depth analytics on open source repositories, including repository score, security analysis, maintenance and activity status, reviews, ratings and more. The new extension helps developers make an educated decision about which open source repositories to use in their projects. As well as get support, bug fixes and custom features for the repositories they’re already using; all directly from the repository’s owner.

    xs:code has also collaborated with developer-focused cyber security company Snyk. Snyk provides real time updates about the cyber security vulnerabilities of code, as a developer is writing or updating it. Insights integrates Snyk’s API to allow users to view any cyber security vulnerabilities with the designated open source code, and allows users to check how adjustments to the code affects the security of the overall set of code. Additionally, Insights also provides a feature aimed for those long coding nights: a pizza ordering feature, showing the pizza places closest to the user and an order option directly from the extension.

    Founded in 2019 xs:code connects open source developers with software companies by allowing developers to offer paid products and services on top of their free and open source code on the online xs:code platform. After partnering with Redis with a dollar-for-dollar grant to use the xs:code platform, Insights is the latest product helping software companies, and open source developers.

    “xs:code Insights is the first tool of its kind and will save developers using open source code countless hours,” said Netanel Mohoni, CEO of xs:code. “The information the app displays at the click of a button is invaluable, and the connection we provide to the original developer is extremely useful.The partnership with Snyk is further validation of the quality and value that we are providing to the open source community. We believe Insights will help more software companies discover our platform and discover more ways of working together, making open source better, for everyone.” The extension will be offered as a limited user release exclusively through this link https://blog.xscode.com/insights/

  • Trend Micro Partners With Snyk to Advance DevSecOps

    Trend Micro Partners With Snyk to Advance DevSecOps

    Trend Micro today announced an alliance with Snyk through which alerts about vulnerabilities in open source code will be passed on to the tools Trend Micro makes available to apply virtual patches to both monolithic and microservices-based applications.

    Snyk provides a tool that identifies and fixes vulnerabilities and license violations in open source dependencies and container images. Trend Micro COO Kevin Simzer said his company leverages the alerts generated by Snyk to inform developers and cybersecurity professionals where virtual patches need to be applied.

    Virtual patches are a capability Trend Micro developed to enable IT organizations to address a vulnerability by applying a security policy that limits access to a specific piece of code until a developer can update a monolithic application or replace the containers housing vulnerable code within a set of microservices.

    By working more closely with Snyk, Trend Micro is trying to increase the appeal of its approach to virtual patching among DevSecOps teams, said Simzer. It’s not possible for most developers to address every vulnerability that manifests itself in a timely manner. Virtual patching allows DevSecOps teams to establish which vulnerabilities need to be addressed immediately while making use of virtual patches to protect applications from less severe vulnerabilities until they can be addressed during a DevOps cycle. To advance those capabilities, Simzer noted Trend Micro has already integrated its security offerings with continuous integration/continuous deployment (CI/CD) platforms such as Jenkins.

    Simzer said it will take a while for most cybersecurity professionals to trust developers to address cybersecurity issues during the application development process. However, virtual patches provide a mechanism through which both cultures can collaborate more closely without compromising the rate applications are being built and deployed. The primary reason developers tend not to pay as much attention to cybersecurity issues as everyone would like is because of the deadline pressure most of them are operating under. However, as responsibility for application cybersecurity continues to shift left, more developers are trying to address these issues earlier in the application development process.

    More than 16,000 enterprise IT organizations are already using Trend Micro security offerings to secure both monolithic applications and cloud-native applications based on containers, said Simzer, adding that footprint puts Trend Micro in a position to help organizations embrace best DevSecOps practices.

    Of course, Trend Micro is not the only cybersecurity vendor with similar ambitions. The challenge many organizations will face is defining what processes are best handled by developers invoking application programming interfaces (APIs) versus cybersecurity professionals who are more comfortable employing graphical user interfaces (GUI). There may come a day when more cybersecurity professionals are able to write code, but for now the two camps could not be further apart in terms of the tools they prefer to use. For IT security vendors such as Trend Micro, that means for the foreseeable future, they will continue to need to build GUIs alongside APIs.

    — Mike Vizard