Security

152 articles in this category.

Jan 10, 2022 Karsten Silz

I think the Java community handled this crisis poorly and needs to do much better next time. What do you think?

A pragmatic guide to Java logging—what should we log, what shouldn’t we log, and how to implement Java logging properly.

Dec 15, 2021 Roy van Rijn

Over the last couple of days (and nights) I’ve been studying the new (extremely dangerous) vulnerability in log4j2 called Log4Shell.

Dec 13, 2021 Erik Costlow

Java developers typically choose from several logging systems or facades. Many of these logging frameworks have grown to work together.

On Dec.10, 2021, a new, critical Log4j vulnerability was disclosed: Log4Shell. All current versions of log4j2 up to 2.14.1 are vulnerable.

The Java 17 LTS release brings you significant improvements to prevent malicious deserialization in your java applications.

Our research team found a correlation between socially trending vulnerabilities and the existence of exploits that can harm your …

Oct 20, 2021 Shai Almog

Java Debug Wire Protocol (a.k.a. JDWP) was designed for testing internally. Opening it to production is a HUGE security and stability …

Aug 19, 2021 Sven Ruppert

New attack vectors are becoming more and more sophisticated and are directed more and more against the value chain in general!

If you are still running on an old Maven version like 3.6.3 or below, you need to upgrade to version 3.8.1 because of security reasons.