Brian Vermeer
5,712 viewsExploring the Apache Commons Configuration RCE Vulnerability
Before we dive into the details of this vulnerability, we want to make it clear that there’s no need for panic!
Category
Security
Brian Vermeer
5,712 views
Brian Vermeer
9,640 viewsSecure CI/CD Pipelines with GitHub Actions for Your Java Apps
Learn how to integrate Snyk into your GitHub CI/CD to automate security scanning as part of your build cycle prior to production.
Nicolas Frankel
2,900 viewsHow to Secure Your Web Apps With An API Gateway
When header values depend on the web app, we need to reload the configuration without downtime and Continuous Deployment pipeline …
Brian Vermeer
5,412 viewsDeserialization exploits in Java: why should I Care?
Deserialization vulnerabilities work natively in Java, how attack chains are created, not restricted to Java's custom serialization …
Brian Vermeer
13,419 viewsHow to do password hashing in Java applications the right way
The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.
Deepu K Sasidharan
7,950 viewsDoes Java 18 Finally Have A Better Alternative To JNI?
Java 18, released last month, includes the 2nd incubator of the Foreign Function & Memory API (FFI). Let's look at the state of the Java …
Brian Vermeer
3,560 viewsSpring4Shell: The zero-day RCE in the Spring Framework explained
We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …
Shai Almog
2,628 viewsSpring Remote Code Execution Vulnerability
A new issue impacting Spring Core on Java 9 and newer could be the next Log4J. Here's what I know so far (mitigation and investigation).
Jadon Ortlepp
3,482 viewsQuick Fire Java: Java After Log4j
Watch a 10 minute discussion on Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.
Brian Vermeer
5,505 viewsSecurity Warning: Your Java Attack Surface Just Got Bigger
Learn about common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j.