Best Practices for Managing Java Dependencies
Knowing how to select, update, and remove Java dependencies from our application is essential for security.
Security
Controlling your Server with a Reverse Shell Attack
The last thing you need for your happily deployed application is someone to take over your system and fully control it!
Learning by Auditing Kubernetes Manifests
Find out about Checkov, which scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Exploring the Apache Commons Configuration RCE Vulnerability
Before we dive into the details of this vulnerability, we want to make it clear that there’s no need for panic!
Secure CI/CD Pipelines with GitHub Actions for Your Java Apps
Learn how to integrate Snyk into your GitHub CI/CD to automate security scanning as part of your build cycle prior to production.
How to Secure Your Web Apps With An API Gateway
When header values depend on the web app, we need to reload the configuration without downtime and Continuous Deployment pipeline …
Deserialization exploits in Java: why should I Care?
Deserialization vulnerabilities work natively in Java, how attack chains are created, not restricted to Java's custom serialization …
How to do password hashing in Java applications the right way
The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.
Does Java 18 Finally Have A Better Alternative To JNI?
Java 18, released last month, includes the 2nd incubator of the Foreign Function & Memory API (FFI). Let's look at the state of the Java …
Spring4Shell: The zero-day RCE in the Spring Framework explained
We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …