Steve Poole
1,999 viewsfirst, a word about ecosystems Before we dive into Shai-Hulud, before we label it “sophisticated” or “advanced” or “next generation,” we …
Steve Poole
2,772 viewsThis is a follow-on to the article The Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World. What you'll learn …
Jonathan Vila
4,134 viewsSecure Java projects with SonarQube AI Code Assurance. Use AI CodeFix and the MCP Server to auto-remediate technical debt instantly.
Michal Maléř
3,981 viewsThis article explores how Quarkus can help organizations reduce costs, streamline development, and modernize their Java applications for …
Michal Maléř
4,470 viewsPublic clouds such as AWS, Microsoft Azure, and Google Cloud, and platforms like Red Hat OpenShift, favor services that start fast and stay …
Jonathan Vila
3,652 viewsYour code is safe, but are your dependencies? Part 3 reveals how SonarQube Advanced Security detects hidden CVEs, manages licenses, and …
Steve Poole
3,115 viewsIn this article you’ll learn Why CVEs record that a vulnerability exists, not that a usable fix exists How vulnerabilities are often …
Jonathan Vila
13,529 viewsAI MCP is awesome to connect our Agents to real time data, but also open a dangerous door to security threats
Anthony Layton
2,277 viewsWhen it comes to Java security, the first thing that comes to mind should be the JVM. If you’re relying on outdated, unpatched, or …
Miro Wengner
10,992 viewsThis newsletter focuses on examining how AI enhances productivity through enterprise studies, agentic system architecture, attack vectors, …
