Iryna Dohndorf
2,355 viewsTiberius: A Security Testing Framework for LLM Applications in Java
Tiberius: A Security Testing Framework for LLM Applications in Java How do you write a regression test for a system that is …
Category
Security
Iryna Dohndorf
2,355 views
Cristobal Escobar
1,293 viewsIntroducing bx-jwt: Enterprise-Grade JSON Web Tokens for BoxLang
JWT authentication is everywhere. But rolling it correctly — with proper algorithm enforcement, key management, clock skew handling, JWE …
Cristobal Escobar
1,347 viewsBoxLang v1.13.0: Compatibility, Concurrency, and Formatter Maturity
BoxLang 1.13.0 is a stability-first release with deep compatibility work and runtime hardening. This build closes 48 issues, with the …
Brian Vermeer
1,046 viewsDon't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)
The Thymeleaf vulnerability with a CVSS score of 9.1 grabs your attention, as it should. But before you call the cavalry and claim this as …
919 viewsFoojay Podcast #95: Is Your Java App Actually Secure, Or Does It Just Look That Way?
Is your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve …
Steve Poole
3,515 viewsSpring Boot 3.5 EOL — The CVE Blind Spot Nobody Talks About
Spring Boot 3.5 goes EOL June 30, 2026. But the real risk isn't the migration. It's what happens to CVE reporting once a project reaches end …
Steve Poole
2,136 viewsWhy Java Developers Over-Trust AI-Generated Code
AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …
Jonathan Vila
10,822 viewsBest practices for Mastering AI Agents, Subagents, Skills & MCP
Master AI agents with 5 developer best practices for building scalable architecture with MCP, subagents, context isolation, and guardrails.
Hüseyin Akdoğan
4,822 viewsDPoP: What It Is, How It Works, and Why Bearer Tokens Aren't Enough
DPoP is one of the most exciting developments in the IAM (Identity and Access Management) space in recent years. Yet many backend developers …
Joe Kuhel
3,420 viewsTomcat TLSv1.3 cipher configuration
A Tomcat update splits TLSv1.3 cipher configuration into a new attribute, silently dropping your Spring Boot cipher restrictions. Here's how …