How to do password hashing in Java applications the right way
The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.
Security
Does Java 18 Finally Have A Better Alternative To JNI?
Java 18, released last month, includes the 2nd incubator of the Foreign Function & Memory API (FFI). Let's look at the state of the Java …
Spring4Shell: The zero-day RCE in the Spring Framework explained
We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …
Spring Remote Code Execution Vulnerability
A new issue impacting Spring Core on Java 9 and newer could be the next Log4J. Here's what I know so far (mitigation and investigation).
Quick Fire Java: Java After Log4j
Watch a 10 minute discussion on Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.
Security Warning: Your Java Attack Surface Just Got Bigger
Learn about common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j.
Detect, Track, Verify Security Issues & 0-Days
Learn about major milestones in app security: finding the issue, evaluating a breach, proving it, and validating the fix!
Treat Security as a Risk
Security is the poster child of a Non-Functional Requirement: most people don't care until the proverbial matter hits the rotary propeller.
The State of Java in 2022
While more than 26 years old, Java is still one of the top three most popular programming languages. Find out how to find out why and how!
You're Running Untrusted Code!
I'm afraid the deprecation of the Security Manager just added several lines to that risk, all linked to running untrusted code.