Security

152 articles in this category.

The Thymeleaf vulnerability with a CVSS score of 9.1 grabs your attention, as it should. But before you call the cavalry and claim this as …

Is your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve …

Apr 19, 2026 Steve Poole

Spring Boot 3.5 goes EOL June 30, 2026. But the real risk isn't the migration. It's what happens to CVE reporting once a project reaches end …

Apr 9, 2026 Steve Poole

AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …

Master AI agents with 5 developer best practices for building scalable architecture with MCP, subagents, context isolation, and guardrails.

DPoP is one of the most exciting developments in the IAM (Identity and Access Management) space in recent years. Yet many backend developers …

Feb 26, 2026 Joe Kuhel

A Tomcat update splits TLSv1.3 cipher configuration into a new attribute, silently dropping your Spring Boot cipher restrictions. Here's how …

Feb 12, 2026 Steve Poole

first, a word about ecosystems Before we dive into Shai-Hulud, before we label it “sophisticated” or “advanced” or “next generation,” we …

Jan 23, 2026 Steve Poole

This is a follow-on to the article The Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World. What you'll learn …

Secure Java projects with SonarQube AI Code Assurance. Use AI CodeFix and the MCP Server to auto-remediate technical debt instantly.