# c-cpp

Published articles for c-cpp.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Vulnerability-Free C and C++ development in automotive manufacturing and software defined vehicles (SDV)

DevFeed: [Vulnerability-Free C and C++ development in automotive manufacturing and software defined vehicles (SDV)](<https://devfeed.tech/articles/vulnerability-free-c-and-c-development-in-automotive-manufacturing-and-software-defined-vehicles-sdv-8228.md>)

Original publisher: [Read original article](<https://snyk.io/blog/vulnerability-free-c-and-c-development-in-automotive-manufacturing-and/>)

Author: Liran Tal

Published: 2024-10-23T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [iac-security](<https://devfeed.tech/topics/iac-security.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c](<https://devfeed.tech/tags/c.md>), [c-cpp](<https://devfeed.tech/tags/c-cpp.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [manufacturing](<https://devfeed.tech/tags/manufacturing.md>), [memory-safety](<https://devfeed.tech/tags/memory-safety.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article examines security risks in C and C++ software used for software-defined vehicles and describes MISRA C:2023 and MISRA C++:2023 guidance intended to improve safety, reliability, and application security.

### Source excerpt

Look into the security challenges facing the booming Software-Defined Vehicle (SDV) market. While SDV promises exciting features and revenue streams, its reliance on C and C++ code, notorious for vulnerabilities, raises concerns.

## Proactive AppSec continuous vulnerability management for developers and security teams

DevFeed: [Proactive AppSec continuous vulnerability management for developers and security teams](<https://devfeed.tech/articles/proactive-appsec-continuous-vulnerability-management-for-developers-and-security-teams-8055.md>)

Original publisher: [Read original article](<https://snyk.io/blog/proactive-appsec-continuous-vulnerability-management/>)

Author: Liran Tal

Published: 2024-10-02T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>), [container-security](<https://devfeed.tech/topics/container-security.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [GitHub Copilot](<https://devfeed.tech/topics/github-copilot.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [npm](<https://devfeed.tech/topics/npm.md>), [React](<https://devfeed.tech/topics/react.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c-cpp](<https://devfeed.tech/tags/c-cpp.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [container](<https://devfeed.tech/tags/container.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [dependency](<https://devfeed.tech/tags/dependency.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [development](<https://devfeed.tech/tags/development.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open](<https://devfeed.tech/tags/open.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [ruby](<https://devfeed.tech/tags/ruby.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [software](<https://devfeed.tech/tags/software.md>), [software-development](<https://devfeed.tech/tags/software-development.md>), [source](<https://devfeed.tech/tags/source.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

The article explains why developers and security teams need continuous vulnerability management across the software development lifecycle. It covers risks from open-source dependencies, vendor-controlled supply chains, AI-generated code, prompt injection, GitHub Copilot, and containerized applications, and emphasizes automating vulnerability identification, remediation, dependency scanning, and container security.

### Source excerpt

Protect against modern threats like open-source supply chain attacks and AI-generated code vulnerabilities. Automate dependency scanning, remediation, and container security to ensure your applications are safe and compliant. Secure your software development with Snyk's comprehensive vulnerability management solution.

## Identifying insecure C Code with Valgrind and fixing with Snyk Code

DevFeed: [Identifying insecure C Code with Valgrind and fixing with Snyk Code](<https://devfeed.tech/articles/identifying-insecure-c-code-with-valgrind-and-fixing-with-snyk-code-7966.md>)

Original publisher: [Read original article](<https://snyk.io/blog/identifying-insecure-c-code-valgrind/>)

Author: Liran Tal

Published: 2024-09-24T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [C](<https://devfeed.tech/topics/c.md>), [Static code analysis](<https://devfeed.tech/topics/static-code-analysis.md>), [Memory Leaks](<https://devfeed.tech/topics/memory-leaks.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [Security](<https://devfeed.tech/topics/security.md>), [snyk-code](<https://devfeed.tech/topics/snyk-code.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c](<https://devfeed.tech/tags/c.md>), [c-cpp](<https://devfeed.tech/tags/c-cpp.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [docker](<https://devfeed.tech/tags/docker.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [memory-leaks](<https://devfeed.tech/tags/memory-leaks.md>), [memory-management](<https://devfeed.tech/tags/memory-management.md>), [programming](<https://devfeed.tech/tags/programming.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This tutorial explains how insecure C and C++ code can introduce memory leaks and other vulnerabilities, and describes using Valgrind and Snyk Code's static code analysis to identify and fix them. It also discusses dynamic memory allocation, memory exhaustion, and relevant MISRA guidance.

### Source excerpt

Discover how to secure your C and C++ code with Snyk. Learn about common vulnerabilities like memory leaks and buffer overflows in C and C++ and how Snyk's static code analysis tool can help you identify and fix them. Protect your critical software from security threats.

## The XZ backdoor CVE-2024-3094

DevFeed: [The XZ backdoor CVE-2024-3094](<https://devfeed.tech/articles/the-xz-backdoor-cve-2024-3094-8212.md>)

Original publisher: [Read original article](<https://snyk.io/blog/the-xz-backdoor-cve-2024-3094/>)

Author: Liran Tal

Published: 2024-03-31T20:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [OpenSSH](<https://devfeed.tech/topics/openssh.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [blog](<https://devfeed.tech/tags/blog.md>), [breach](<https://devfeed.tech/tags/breach.md>), [c-cpp](<https://devfeed.tech/tags/c-cpp.md>), [cli](<https://devfeed.tech/tags/cli.md>), [compression](<https://devfeed.tech/tags/compression.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-insights](<https://devfeed.tech/tags/vulnerability-insights.md>)

### AI overview

The article examines the XZ/liblzma backdoor tracked as CVE-2024-3094, its potential effect on SSH authentication, and the investigation into the malicious code.

### Source excerpt

On the 29th of March 2024, the high-stakes investment and prolonged campaign to plant a backdoor in the Linux software library liblzma to gain access to multiple operating systems via Linux distributions was carried out by a malicious actor.

## Accelerate C/ C++ security with Snyk

DevFeed: [Accelerate C/ C++ security with Snyk](<https://devfeed.tech/articles/accelerate-c-c-security-with-snyk-7790.md>)

Original publisher: [Read original article](<https://snyk.io/blog/accelerate-c-cpp-security-snyk/>)

Author: Lauren Place; Marcie Cheung

Published: 2023-12-05T14:00:00Z

Content type: release

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [c/c++](<https://devfeed.tech/topics/c-c-plus-plus.md>), [snyk-code](<https://devfeed.tech/topics/snyk-code.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Code](<https://devfeed.tech/topics/code.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [ide](<https://devfeed.tech/topics/ide.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c-c-plus-plus](<https://devfeed.tech/tags/c-c-plus-plus.md>), [c-cpp](<https://devfeed.tech/tags/c-cpp.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cli](<https://devfeed.tech/tags/cli.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [ide](<https://devfeed.tech/tags/ide.md>), [pmm](<https://devfeed.tech/tags/pmm.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Snyk announced general availability of C/C++ support for Snyk Code. The feature analyzes C/C++ source code directly without requiring compilation or a build, provides fast feedback, and integrates with IDE, CLI, Git, pull request, and CI/CD workflows. It also detects vulnerable open source packages and non-compliant licenses, with support for Windows, Linux, desktop, server, web, embedded applications, and frameworks such as Yocto, STL, and Boost.

### Source excerpt

Today, Snyk is welcoming C/C++ security into the world of modern development with the general availability of C/C++ support for Snyk Code!