Internal Security: Hardening Internal Systems
Security is at odds with productivity and team cohesion. It doesn't have to be. There's a balance that mitigates external and internal risk
Category
Security
CVE-2022-42889: Apache Commons Text (Text4Shell) Vulnerability
Resolve this issue by upgrading to commons-text version 1.10 (or later), which disables the prefixes URL, DNS, and script by default.
How to Use Java DTOs to Stay Secure
How DTOs are used in modern Java, how your apps can benefit, and how Java DTOs can help you be more secure.
Best Practices for Managing Java Dependencies
Knowing how to select, update, and remove Java dependencies from our application is essential for security.
Controlling your Server with a Reverse Shell Attack
The last thing you need for your happily deployed application is someone to take over your system and fully control it!
Learning by Auditing Kubernetes Manifests
Find out about Checkov, which scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Exploring the Apache Commons Configuration RCE Vulnerability
Before we dive into the details of this vulnerability, we want to make it clear that there’s no need for panic!
Secure CI/CD Pipelines with GitHub Actions for Your Java Apps
Learn how to integrate Snyk into your GitHub CI/CD to automate security scanning as part of your build cycle prior to production.
How to Secure Your Web Apps With An API Gateway
When header values depend on the web app, we need to reload the configuration without downtime and Continuous Deployment pipeline …
Deserialization exploits in Java: why should I Care?
Deserialization vulnerabilities work natively in Java, how attack chains are created, not restricted to Java's custom serialization …