Simon Martinelli
6,878 viewsVaadin, OAuth2, and Keycloak
Security matters! Learn how to configure Vaadin and Spring Security to use OAuth2 with Keycloak on Foojay.io Today!
Category
Security
Simon Martinelli
6,878 views
Brian Vermeer
6,724 viewsUnsafe Deserialization Vulnerability in SnakeYaml
org.yaml:snakeyaml package is widely used in the Java ecosystem, in part because it is packaged by default in the spring-boot-starter.
7,240 viewsFoojay Podcast #7: Security in Java -- what do we need to know?
We invited Java security experts to dive into the fascinating world of secure coding and detecting vulnerabilities in your Java …
Shai Almog
3,819 viewsInternal Security: Hardening Internal Systems
Security is at odds with productivity and team cohesion. It doesn't have to be. There's a balance that mitigates external and internal risk
Brian Vermeer
6,809 viewsCVE-2022-42889: Apache Commons Text (Text4Shell) Vulnerability
Resolve this issue by upgrading to commons-text version 1.10 (or later), which disables the prefixes URL, DNS, and script by default.
Brian Vermeer
6,991 viewsHow to Use Java DTOs to Stay Secure
How DTOs are used in modern Java, how your apps can benefit, and how Java DTOs can help you be more secure.
Brian Vermeer
10,358 viewsBest Practices for Managing Java Dependencies
Knowing how to select, update, and remove Java dependencies from our application is essential for security.
Brian Vermeer
7,239 viewsControlling your Server with a Reverse Shell Attack
The last thing you need for your happily deployed application is someone to take over your system and fully control it!
Nicolas Frankel
2,296 viewsLearning by Auditing Kubernetes Manifests
Find out about Checkov, which scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Brian Vermeer
5,696 viewsExploring the Apache Commons Configuration RCE Vulnerability
Before we dive into the details of this vulnerability, we want to make it clear that there’s no need for panic!