Brian Vermeer
9,526 viewsSecure CI/CD Pipelines with GitHub Actions for Your Java Apps
Learn how to integrate Snyk into your GitHub CI/CD to automate security scanning as part of your build cycle prior to production.
Category
Security
Brian Vermeer
9,526 views
Nicolas Frankel
2,880 viewsHow to Secure Your Web Apps With An API Gateway
When header values depend on the web app, we need to reload the configuration without downtime and Continuous Deployment pipeline …
Brian Vermeer
5,385 viewsDeserialization exploits in Java: why should I Care?
Deserialization vulnerabilities work natively in Java, how attack chains are created, not restricted to Java's custom serialization …
Brian Vermeer
13,389 viewsHow to do password hashing in Java applications the right way
The first rule of password hashing algorithms is: Don't write your own password hashing algorithm! Let's learn how we do password hashing.
Deepu K Sasidharan
7,890 viewsDoes Java 18 Finally Have A Better Alternative To JNI?
Java 18, released last month, includes the 2nd incubator of the Foreign Function & Memory API (FFI). Let's look at the state of the Java …
Brian Vermeer
3,544 viewsSpring4Shell: The zero-day RCE in the Spring Framework explained
We’ll explore how remote code execution (RCE) works, explaining Spring4Shell, a zero-day vulnerability in the Spring framework that could …
Shai Almog
2,615 viewsSpring Remote Code Execution Vulnerability
A new issue impacting Spring Core on Java 9 and newer could be the next Log4J. Here's what I know so far (mitigation and investigation).
Jadon Ortlepp
3,468 viewsQuick Fire Java: Java After Log4j
Watch a 10 minute discussion on Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.
Brian Vermeer
5,487 viewsSecurity Warning: Your Java Attack Surface Just Got Bigger
Learn about common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j.
Shai Almog
3,073 viewsDetect, Track, Verify Security Issues & 0-Days
Learn about major milestones in app security: finding the issue, evaluating a breach, proving it, and validating the fix!