Foojay Podcast #58: How Java Developers Can Secure Their Code
Three years after Log4Shell caused a significant security issue, we still struggle with insecure dependencies and injection problems...

Three years after Log4Shell caused a significant security issue, we still struggle with insecure dependencies and injection problems...
A lurking issue has been surprisingly overlooked: the continued use of vulnerable Log4j and Spring Framework versions in many projects.
The OpenJDK community has made Java safer for users and developers while making it easier to design, build, and run applications quickly.

Let's examine the three most common injection attack types—SQL injection, Deserialization Injection, and Logging Injection—and discuss ways …

Nowadays, the security of your applications is just as important as the functionality they provide. Therefore, analyzing your code for …
IBM Semeru Runtimes for Java 11+ includes FIPS 140-3 cryptography certified by the U.S. National Institute of Standards and Technology …

Read the only logical conclusion of reading DORA in the context of OpenJDK, assuming that it has meaning and intent in the context of …

Given the requirements of the DORA Act, which mandates strong operational resilience for financial institutions in the EU, leveraging a JVM …

According to the Datadog "State of DevSecOps" report, a staggering 90% of Java services are susceptible to one or more critical or …

DORA is not just a regional EU regulation but one with far-reaching implications for the global financial services market.