Path Traversal Vulnerability in Deep Java Library (DJL)
This vulnerability highlights the importance of addressing supply chain security. If you aren't already, consider scanning your applications …
Security
Creating SBOMs with the Snyk CLI
The software bill of materials (SBOM) is quickly becoming an essential aspect of open source security and compliance. In this post, we'll …
Code Reviews with AI a developer guide
Code reviews can be time-consuming and tedious. Let's explore their common pitfalls and how AI tools can revolutionize each phase of the …
Securing Vaadin Applications with Microsoft Entra
Many companies use Microsoft 365, so letting users log in with their Microsoft account is a good choice. This blog post shows how to secure …
Pseudorandom Number Generators - The Secret Behind Santa’s Gift Bag
Discover the importance of random number generators and their crucial role in cryptography and data security.
6,692 viewsFoojay Podcast #63: How do we keep your Java applications up to date and secure?
Do you want to bring your system from Java 8 to 23? Did you know that Java 17 already has 13 security releases? And that you can use tools …
Prevent LDAP injection in #java with #springboot
Prevent LDAP injection in #java 💥💉with #springboot: Learn how to prevent LDAP injection attacks with expert tips from Vincent VAUBAN. …
6,895 viewsFoojay Podcast #58: How Java Developers Can Secure Their Code
Three years after Log4Shell caused a significant security issue, we still struggle with insecure dependencies and injection problems...
The Persistent Threat: Why Major Vulnerabilities Like Log4Shell and Spring4Shell Remain Significant
A lurking issue has been surprisingly overlooked: the continued use of vulnerable Log4j and Spring Framework versions in many projects.
Java: Where the Wild Code Isn't (On Security and Modularity)
The OpenJDK community has made Java safer for users and developers while making it easier to design, build, and run applications quickly.