Joe Kuhel
3,516 viewsTomcat TLSv1.3 cipher configuration
A Tomcat update splits TLSv1.3 cipher configuration into a new attribute, silently dropping your Spring Boot cipher restrictions. Here's how …
Category
Security
Joe Kuhel
3,516 views
Steve Poole
2,025 viewsShai-Hulud and the npm Worm: How Speed-Optimised Dev Ecosystems Made a Self-Propagating Supply Chain Attack Inevitable
first, a word about ecosystems Before we dive into Shai-Hulud, before we label it “sophisticated” or “advanced” or “next generation,” we …
Steve Poole
2,864 viewsSecurity Doesn’t Start at Liftoff
This is a follow-on to the article The Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World. What you'll learn …
Jonathan Vila
4,324 viewsSonarQube AI Code Assurance & MCP: Auto-Fix Java (Part 4)
Secure Java projects with SonarQube AI Code Assurance. Use AI CodeFix and the MCP Server to auto-remediate technical debt instantly.
Michal Maléř
4,138 viewsOptimizing Java for the Cloud-Native Era with Quarkus
This article explores how Quarkus can help organizations reduce costs, streamline development, and modernize their Java applications for …
Michal Maléř
4,634 viewsQuarkus: A Runtime and Framework for Cloud-Native Java
Public clouds such as AWS, Microsoft Azure, and Google Cloud, and platforms like Red Hat OpenShift, favor services that start fast and stay …
Jonathan Vila
3,772 viewsStop the trojan horse in your pom: SonarQube Advace Security
Your code is safe, but are your dependencies? Part 3 reveals how SonarQube Advanced Security detects hidden CVEs, manages licenses, and …
Steve Poole
3,168 viewsThe Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World
In this article you’ll learn Why CVEs record that a vulnerability exists, not that a usable fix exists How vulnerabilities are often …
Jonathan Vila
13,585 viewsThe 5 Knights of the MCP Apocalypse
AI MCP is awesome to connect our Agents to real time data, but also open a dangerous door to security threats
Anthony Layton
2,306 viewsJava Security Starts with the JVM
When it comes to Java security, the first thing that comes to mind should be the JVM. If you’re relying on outdated, unpatched, or …