Felipe Maschio
1 viewsMasking a JVM thread dump without breaking the analysis
A few weeks ago I posted on r/java about detecting virtual thread pinning from a plain thread dump. The technical discussion was fine. The …
Category
Security
Felipe Maschio
1 views
Steve Poole
384 viewsYour AI Assistant Is Choosing Your Dependencies
AI code generation doesn't just write your Java. It picks your suppliers, edits your build and pulls in ecosystems you don't know. What …
Cristobal Escobar
251 viewsBuild Secure AI Chat Applications with BoxLang, RAG, Ollama, and Amazon Bedrock with Dan Card
Build Secure AI Chat Applications with BoxLang, RAG, Ollama, and Amazon Bedrock AI demos are everywhere. Building an AI-powered feature that …
Steve Poole
645 viewsAI Found the Bugs. Who's Patching Your EOL Java Code?
AI finds decades-old flaws at machine speed, but the fixes only reach supported versions. What that means for end-of-life Java, and what to …
Cristobal Escobar
308 viewsBoxLang AWS, Azure, and Google Secrets Manager Module Released
Every production application carries secrets: database passwords, API tokens, encryption keys. The question is never whether to manage them …
Muhammad Usman
751 viewsThis Dependency Update Looked Exactly Like an Account Takeover
I pointed a scanner I have been building at an old Spring project, and it flagged javax.activation. The bump was 1.1-rev-1 to 1.1.1. Prior …
Steve Poole
1,818 views7 Jackson CVEs in One Day: AI-Assisted Security Research
Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.
Michal Maléř
516 viewsQuarkus Unpacked: Insights from the Foojay Podcast
I recently had the pleasure of joining the Foojay podcast to talk about Quarkus in depth. The conversation covered a lot of ground, from …
Steve Poole
1,233 viewsDid AI Just Break Software Security For Ever?
AI finds exploits in hours. Patch cycles run 30–60 days. EOL software gets neither. Here's what changed in 2026 and what to do about it.
Steve Poole
2,195 viewsSpring Boot 3.5 Migration and the CRA: When Good Enough Isn't"
Spring Boot 3.5 reaches EOL on June 30. The legal context is about to change. Here's what 'without undue delay' means when commercial …