Why Java Developers Over-Trust AI-Generated Code
AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …
Security
Best practices for Mastering AI Agents, Subagents, Skills & MCP
Master AI agents with 5 developer best practices for building scalable architecture with MCP, subagents, context isolation, and guardrails.
DPoP: What It Is, How It Works, and Why Bearer Tokens Aren't Enough
DPoP is one of the most exciting developments in the IAM (Identity and Access Management) space in recent years. Yet many backend developers …
Tomcat TLSv1.3 cipher configuration
A Tomcat update splits TLSv1.3 cipher configuration into a new attribute, silently dropping your Spring Boot cipher restrictions. Here's how …
Shai-Hulud and the npm Worm: How Speed-Optimised Dev Ecosystems Made a Self-Propagating Supply Chain Attack Inevitable
first, a word about ecosystems Before we dive into Shai-Hulud, before we label it “sophisticated” or “advanced” or “next generation,” we …
Security Doesn’t Start at Liftoff
This is a follow-on to the article The Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World. What you'll learn …
SonarQube AI Code Assurance & MCP: Auto-Fix Java (Part 4)
Secure Java projects with SonarQube AI Code Assurance. Use AI CodeFix and the MCP Server to auto-remediate technical debt instantly.
Optimizing Java for the Cloud-Native Era with Quarkus
This article explores how Quarkus can help organizations reduce costs, streamline development, and modernize their Java applications for …
Quarkus: A Runtime and Framework for Cloud-Native Java
Public clouds such as AWS, Microsoft Azure, and Google Cloud, and platforms like Red Hat OpenShift, favor services that start fast and stay …
Stop the trojan horse in your pom: SonarQube Advace Security
Your code is safe, but are your dependencies? Part 3 reveals how SonarQube Advanced Security detects hidden CVEs, manages licenses, and …