cve9 articles

Table of Contents First: The rate of CVE arrivalsSecond: AI detection of vulnerabilities becoming the normThird: The breaking of an old asymmetryFourth: Regulators got impatientThe maths no longer worksThink about Y2KThe response doesn’t wait for the disasterThe asymmetry that should …

Table of Contents If You’re Already on 4.0The zombie problem followed youIf You’re Still on 3.5The technical risk is growing. The legal risk is about to change.What “Without Undue Delay” Actually Means NowArticle 14 and the 24-hour clockThe calculation changes …

Table of Contents YouTubePodcast AppsGuestsSteve PooleDavid WelchContentIs your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve Poole and David Welch, both from HeroDevs, to dig …

Table of Contents The CVE Blind SpotThe River StyxThe Rules Changed. The Habits Didn’t.What This Looks Like in PracticeWhen Dependencies Become ZombiesSpring Boot 3.5: The Next CrossingWe’ve Seen This Film BeforeThe Window Is Open. For Now.The Map, Not Just the …

Table of Contents Are you sitting comfortably?The CVE is (almost) not importantThe Inversion of the Security TimelineHabit vs. HypeThe Flawed Assumption of Loud AlertsPrioritising Changes Over StoriesThe main timelineAre we done?How the message dilutesA common scenerioWhat This Means to You …

Table of Contents Last month, I published a Foojay article about the risks in systems that are stuck on old or outdated Java versions and got a lot of feedback from developers. Most of them want to move on but …

Keeping your Java environment stable requires discerning which updates to install and then installing them appropriately.

We invited Java security experts to dive into the fascinating world of secure coding and detecting vulnerabilities in your Java applications!