Brian Vermeer
6,991 viewsHow to Use Java DTOs to Stay Secure
How DTOs are used in modern Java, how your apps can benefit, and how Java DTOs can help you be more secure.
Brian Vermeer
54 articles
350,071 viewsBrian Vermeer
6,991 views
Brian Vermeer
10,358 viewsBest Practices for Managing Java Dependencies
Knowing how to select, update, and remove Java dependencies from our application is essential for security.
Brian Vermeer
7,239 viewsControlling your Server with a Reverse Shell Attack
The last thing you need for your happily deployed application is someone to take over your system and fully control it!
Brian Vermeer
5,696 viewsExploring the Apache Commons Configuration RCE Vulnerability
Before we dive into the details of this vulnerability, we want to make it clear that there’s no need for panic!
Brian Vermeer
9,526 viewsSecure CI/CD Pipelines with GitHub Actions for Your Java Apps
Learn how to integrate Snyk into your GitHub CI/CD to automate security scanning as part of your build cycle prior to production.
Brian Vermeer
5,385 viewsDeserialization exploits in Java: why should I Care?
Deserialization vulnerabilities work natively in Java, how attack chains are created, not restricted to Java's custom serialization …
Brian Vermeer
13,389 viewsHow to do password hashing in Java applications the right way
The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.
Brian Vermeer
3,544 viewsSpring4Shell: The zero-day RCE in the Spring Framework explained
We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …
Brian Vermeer
5,487 viewsSecurity Warning: Your Java Attack Surface Just Got Bigger
Learn about common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j.
Brian Vermeer
6,356 viewsJava Logging: What To Log & What Not To Log?
A pragmatic guide to Java logging—what should we log, what shouldn’t we log, and how to implement Java logging properly.