Preventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.
Security
Fix Java Security Issues While Coding in IntelliJ IDEA
Let’s see how we can integrate security and secure development into IntelliJ IDEA using the new Snyk vulnerability scanner plugin!
Namespace Shadowing (a.k.a. “Dependency Confusion”) Attack
The npm Registry is vulnerable to supply chain namespace shadowing, also known as “Dependency Confusion” attacks!
8 Best Practices to Prevent SQL Injection Attacks
SQL injection, when a user adds untrusted data to a database query, is one of the most dangerous vulnerabilities for online applications.
Secure Code Review Best Practices (Part 2)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Secure Code Review Best Practices (Part 1)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Safe Writing to Files in IoT and Industrial Systems
Learn how to write to disk safely in Java, combining disk sync, shutdown hooks, and atomic renaming of files!
The SolarWinds Hack for Java Developers
For Java developers and architects who design, build, and run applications, there are two core take-aways to the SolarWinds hack...
OIDC Client with Mutual TLS Client Authentication
Learn how to set up an OpenID Connect (OIDC) client with Spring Security using mutual TLS as a method for authenticating the client.
Quick Security Wins and Getting Started with DevSecOps
What are the quick wins or low hanging fruits if you want to deal more with the topic of security in software development?