Security

152 articles in this category.

Do you ever wonder what OpenJDK distributions and what Java versions your peers are using? What Java versions?

Let's look at analyzing dependencies in IntelliJ IDEA. Where does your application get a specific version of a library, show conflicts, etc.

Did you know bots can automatically create pull requests to keep dependencies secure and up to date? Find out here!

Mar 24, 2023 Erik Costlow

A demonstration of log4j exploits, which defenses people tried, and which worked. We'll cover how groups responded effectively to patch to …

Path traversal vulnerabilities are a serious threat to Java web applications, amongst the top security issues Snyk finds in Java code.

Next time you’re considering a new Java library, look for the Sonatype Safety Rating on Maven Central to aid in your decision making.

Java is a compiled language, so you should create an SBOM whenever you build a release version of your application. Find out more here!

Externalizing your authentication process to a third party may be sensible, but avoid binding your infrastructure to its proprietary …

Mar 7, 2023 Dan Conn

The third article in a series on SBOMs, software supply chains, the government and you, introducing threat modelling and tools to help!

Mar 3, 2023 Shai Almog

Simple configuration that requires no code change can save you from hacks such as Log4Shell, & from vulnerabilities we don't know about yet!