June 2017 Summaries

Cross Site Scripting (XSS) attacks have seen a significant resurgence in recent years, with XSS vulnerabilities expected to grow by 166% in 2017. Despite increased awareness and more sophisticated defenses, XSS attacks continue to pose a major threat due to their ability to compromise users one at a time rather than leaking data all at once. The rise of single page apps and mobile screens has made it easier for attackers to exploit XSS vulnerabilities, while the increasing use of open source libraries can multiply the reach of such attacks. As a result, application developers, website owners, and security officers should prioritize addressing XSS flaws in their systems to reduce risks and protect users from harm.

The Snyk team is launching its new integration with Bitbucket Server, a professional Git solution for teams, in beta. This integration allows users to test and monitor their Node.js and Ruby applications against vulnerabilities using Snyk's cloud-based platform. The integration is currently available for testing and feedback, with early access being offered to interested users who can contact [email protected] for enabling on their account. Once connected, users can select specific repositories to monitor, receive reports of discovered vulnerabilities, and stay informed about available updates or patches.

Snyk is now available on the UK government's G-Cloud digital marketplace, allowing government services to easily protect their applications against known vulnerabilities in their dependencies. The recent WannaCry ransomware attack highlights the importance of keeping software up-to-date and patched, as unpatched systems can leave companies and individuals exposed to attacks. Snyk offers a solution by testing and monitoring applications for known vulnerabilities, alerting users to potential threats, and even fixing them with a simple GitHub pull request or terminal command.