CVSS 101: First Steps with Common Vulnerability Scoring System
What is the Common Vulnerability Scoring System (CVSS), who is behind it, what are we doing with it, and what does a CVSS Value means for …
Security
About The Lifecycle of a Security Vulnerability
In this article, you'll learn that we have little influence on almost all stages of the typical lifecycle of an IT security vulnerability!
Learn All About Java Encryption and Hashing
What is a strong encryption algorithm today, might be a weak algorithm a year from now. Therefore, encryption needs to be reviewed …
JEP 411: Java's Security Model and the Principle of Least Privilege
Java, like most platforms or languages has layers of security, this article lookS at the Authorization layer and how JEP 411 relates to it.
Getting Started Hacking Third-Party APIs on the JVM
Some alternatives that allow you to make third-party APIs behave in a way that their designers didn't intend to!
Why JEP 411 Will Have a Negative Impact on Java Security
SecurityManager, foundation to build secure software, on its own is insufficient to limit users & software to the least privilege principle.
Sanitize All Input! Sanitize All Input! Sanitize All Input!
Cross-site scripting (XSS) is a well-known issue and mostly utilized in JavaScript applications. However, Java is not immune to this!
Preventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.
Fix Java Security Issues While Coding in IntelliJ IDEA
Let’s see how we can integrate security and secure development into IntelliJ IDEA using the new Snyk vulnerability scanner plugin!
Namespace Shadowing (a.k.a. “Dependency Confusion”) Attack
The npm Registry is vulnerable to supply chain namespace shadowing, also known as “Dependency Confusion” attacks!