Blog
Sonar's latest blog posts
What Code Issues Caused the CrowdStrike Outage?
This blog post takes a look at the potential code issues behind the recent global CrowdStrike outage.
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/7b69d1cd-74f7-4610-a793-6bd3e35737fa/crowdstrike_blog_featured_2x.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/7b69d1cd-74f7-4610-a793-6bd3e35737fa/crowdstrike_blog_featured_2x.webp?w=1201&h=1201&auto=format&fit=crop)
![Get the benefits of TypeScript without writing TypeScript](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/083b6b2a-e0c1-4b39-b651-9b571292ba1e/benefits-of-TypeScript-without-TypeScript-blog-feature.png?w=325&h=200&auto=format&fit=crop)
Typing your JavaScript without writing TypeScript
TypeScript already understands JavaScript, but you can get more out of it when you add types to your JavaScript with JSDoc or TypeScript declaration files
Read blog post >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/335fcf6a-370b-44cf-b1c0-70a0943d9c66/stealing_with_style_skiff_blog_index_v3.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/335fcf6a-370b-44cf-b1c0-70a0943d9c66/stealing_with_style_skiff_blog_index_v3.webp?w=325&h=200&auto=format&fit=crop)
Code Vulnerabilities Put Skiff Emails at Risk
Our Research team discovered critical code vulnerabilities in Proton Mail, Skiff, and Tutanota. This post covers the technical details of the XSS vulnerability in Skiff.
Read article >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/d2904482-a417-4538-a97a-71dd20e227b0/security_guy_tv_interview_blog_index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/d2904482-a417-4538-a97a-71dd20e227b0/security_guy_tv_interview_blog_index.webp?w=325&h=200&auto=format&fit=crop)
Security Guy TV Interview - Going Deeper with SAST and Clean Code
Sonar CEO, Olivier Gaudin, and Head of Research and Development, Johannes Dahse, meet with Security Guy TV’s Chuck Harold to discuss deeper SAST and the importance of Clean Code.
Read article >
![Get the benefits of TypeScript without writing TypeScript](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/36961122-2fd0-4bd1-8aad-40c4c5dfa139/benefits_of_typescript_without_typescript_blog_index.webp?w=325&h=200&auto=format&fit=crop)
Get the benefits of TypeScript in your JavaScript
Let's dive into what you can do to get more and more of TypeScript's benefits in your JavaScript projects.
Read blog post >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/d397fc0e-7eee-427a-8f60-43de4e4d1fd3/sq-10-2_blog-index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/d397fc0e-7eee-427a-8f60-43de4e4d1fd3/sq-10-2_blog-index.webp?w=325&h=200&auto=format&fit=crop)
Introducing SonarQube 10.2: Setting New Standards in Code Quality and Security
Discover the new features in SonarQube 10.2!
Read article >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/559de609-ecc9-4374-84cf-fbf76585abe7/stealing_with_style_protonmail_blog_index_v3.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/559de609-ecc9-4374-84cf-fbf76585abe7/stealing_with_style_protonmail_blog_index_v3.webp?w=325&h=200&auto=format&fit=crop)
Code Vulnerabilities Put Proton Mails at Risk
The Sonar Research team discovered critical code vulnerabilities in Proton Mail, Skiff and Tutanota. This post covers the technical details of the XSS vulnerability in Proton Mail.
Read article >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/acd1048a-2282-463c-8099-1a7b3df28d17/moodle-vulnerabilities_pt-02_blog-index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/acd1048a-2282-463c-8099-1a7b3df28d17/moodle-vulnerabilities_pt-02_blog-index.webp?w=325&h=200&auto=format&fit=crop)
Playing Dominos with Moodle's Security (2/2)
Our security researchers recently discovered two critical vulnerabilities in Moodle that leverage the use of not impactful bugs.
Read article >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/6060aca5-c302-4b8b-b20e-b2ef28e54330/enhancing_sast_detection_leveraging_benchmarks_for_measuring_progress_01_blog_index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/6060aca5-c302-4b8b-b20e-b2ef28e54330/enhancing_sast_detection_leveraging_benchmarks_for_measuring_progress_01_blog_index.webp?w=325&h=200&auto=format&fit=crop)
Enhancing SAST Detection: Leveraging Benchmarks for Measuring Progress
Enhancing Static Application Security Testing SAST, leverage benchmarks for tracking our progress.
Read blog post >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/08a2c5cc-6ff7-4d35-9aa3-2a2a728cdc47/moodle-vulnerabilities_blog-index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/08a2c5cc-6ff7-4d35-9aa3-2a2a728cdc47/moodle-vulnerabilities_blog-index.webp?w=325&h=200&auto=format&fit=crop)
Playing Dominos with Moodle's Security (1/2)
Our security researchers recently discovered two critical vulnerabilities in Moodle that leverage the use of not impactful bugs.
Read article >
![Sonar at BlackHat blog image](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/cd126f17-ed7e-479a-b9ee-7e5923557553/blackhat_2023_event_blog_index.webp?w=325&h=200&auto=format&fit=crop)
BlackHat 2023: Hackers, Casinos, and an Exciting Announcement
The Sonar team of developers are just returning from their trip to Las Vegas where they attended BlackHat USA 2023. If you were not able to make it, here is what you missed.
Read blog post >
![https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/3549eb32-e816-4d63-83a7-00b150e8bfda/deeper-sast-in-javascript_blog-index.webp](https://assets-eu-01.kc-usercontent.com:443/02cb980b-5a8a-016f-80ee-dce623e76463/3549eb32-e816-4d63-83a7-00b150e8bfda/deeper-sast-in-javascript_blog-index.webp?w=325&h=200&auto=format&fit=crop)
What is deeper SAST in JavaScript?
What is SAST, what does deeper SAST mean, and how does this apply to your JavaScript and TypeScript applications?
Read blog post >