Steve Poole
2,406 viewsSpring Boot 3.5 Migration and the CRA: When Good Enough Isn't"
Spring Boot 3.5 reaches EOL on June 30. The legal context is about to change. Here's what 'without undue delay' means when commercial …
Category
Security
Steve Poole
2,406 views
Iryna Dohndorf
2,710 viewsTiberius: A Security Testing Framework for LLM Applications in Java
Tiberius: A Security Testing Framework for LLM Applications in Java How do you write a regression test for a system that is …
Cristobal Escobar
1,367 viewsIntroducing bx-jwt: Enterprise-Grade JSON Web Tokens for BoxLang
JWT authentication is everywhere. But rolling it correctly — with proper algorithm enforcement, key management, clock skew handling, JWE …
Cristobal Escobar
1,409 viewsBoxLang v1.13.0: Compatibility, Concurrency, and Formatter Maturity
BoxLang 1.13.0 is a stability-first release with deep compatibility work and runtime hardening. This build closes 48 issues, with the …
Brian Vermeer
1,078 viewsDon't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)
The Thymeleaf vulnerability with a CVSS score of 9.1 grabs your attention, as it should. But before you call the cavalry and claim this as …
966 viewsFoojay Podcast #95: Is Your Java App Actually Secure, Or Does It Just Look That Way?
Is your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve …
Steve Poole
3,804 viewsSpring Boot 3.5 EOL — The CVE Blind Spot Nobody Talks About
Spring Boot 3.5 goes EOL June 30, 2026. But the real risk isn't the migration. It's what happens to CVE reporting once a project reaches end …
Steve Poole
2,225 viewsWhy Java Developers Over-Trust AI-Generated Code
AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …
Jonathan Vila
11,464 viewsBest practices for Mastering AI Agents, Subagents, Skills & MCP
Master AI agents with 5 developer best practices for building scalable architecture with MCP, subagents, context isolation, and guardrails.
Hüseyin Akdoğan
5,069 viewsDPoP: What It Is, How It Works, and Why Bearer Tokens Aren't Enough
DPoP is one of the most exciting developments in the IAM (Identity and Access Management) space in recent years. Yet many backend developers …