Security

152 articles in this category.

The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.

Java 18, released last month, includes the 2nd incubator of the Foreign Function & Memory API (FFI). Let's look at the state of the Java …

We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …

Mar 31, 2022 Shai Almog

A new issue impacting Spring Core on Java 9 and newer could be the next Log4J. Here's what I know so far (mitigation and investigation).

Watch a 10 minute discussion on Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.

Learn about common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j.

Mar 10, 2022 Shai Almog

Learn about major milestones in app security: finding the issue, evaluating a breach, proving it, and validating the fix!

Security is the poster child of a Non-Functional Requirement: most people don't care until the proverbial matter hits the rotary propeller.

While more than 26 years old, Java is still one of the top three most popular programming languages. Find out how to find out why and how!

I'm afraid the deprecation of the Security Manager just added several lines to that risk, all linked to running untrusted code.