#javasecurity ผลการค้นหา

IBM Standards Processing Engine: Critical Java Deserialization Bug CVE-2023-49886 allows remote code execution via unsafe Java deserialization. Immediate patching is recommended. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #JavaSecurity…

🚨 CRITICAL: Hutool <5.8.4 lets attackers exploit QLExpressEngine for possible RCE—Java apps at risk! Audit & upgrade ASAP. Finance, health, gov sectors especially alert. Details: radar.offseq.com/threat/cve-202… #OffSeq #RCE #JavaSecurity

Wenn hashCode(), lügt wird die #HashMap inkonsistent. Im sicherheitskritischen Bereich fatal: Lookup-Ausfall, Authorization Bypass, Resource Lock Hijack — alles möglich. @SvenRuppert liefert eine genaue Analyse mit interaktiver #Vaadin-Demo: javapro.io/de/wenn-hashco… #JavaSecurity

🚨 CRITICAL: HubSpot jinjava <2.8.1 flaw enables remote code execution via unsafe deserialization! Java app users at risk—patch now. 🔒 Details: radar.offseq.com/threat/cve-202… #OffSeq #CVE202559340 #JavaSecurity

🔐 Java 25 (LTS) adds a new KDF API (JEP 510)! KDFs = algorithms that safely derive new keys from an existing secret. ✅ HKDF built in ✅ Secure key material generation ✅ Prepares Java for post-quantum crypto 🌐 #Java25 #JEP510 #JavaSecurity #Cryptography #PostQuantum

Java security made practical🔐 At #Confitura2025, Tomasz Janczewski shares: 🔹 Spring Boot + OWASP in action 🔹 Common pitfalls devs miss 🔹 Simple habits for secure apps #JavaSecurity #SpringBoot #OWASP

🎉 Secure like a pro: Validate JWTs in your Spring apps with confidence using OAuth2 Resource Server. #JavaSecurity

🚀 Stop treating JWT validation as an afterthought. Spring Security + OAuth2 makes it first-class. #JavaSecurity

🛡️ Spring Security + JWT = your REST API's best defense. Learn how to build a secure authentication flow. #JavaSecurity

Global regulations are raising the bar for #JavaSecurity, & gaps in your compliance strategy can put your enterprise at risk. Our blog shares 3 key strategies to stay compliant. bit.ly/3V4mvFO Details & webinar info at bit.ly/4kP5PN3 #OpenJDK #CyberSecurity

NetSPI Security Consultant Mayuri Bochare has published an insightful deep-dive on securing Java Spring applications through code review. 👉 Read the full article: ow.ly/IWfx50WnoVy #proactivesecurity #JavaSecurity #SecureCodeReview

🔐 Safety first! Dynamic compilation needs sandboxing—discover best practices for secure runtime compilation. #JavaSecurity

A major Java supply chain vulnerability due to insecure HTTP dependency downloads has been addressed. Maven Central, JCenter, and build tools like Gradle now block HTTP to improve security. Over 100,000 libraries affected. 🔐 #JavaSecurity #SupplyChain ift.tt/O7AZ3To

🚀 Whether you're building SaaS or internal tools, one-time login tokens are a secure win. See it in action today. #JavaSecurity

Heads up, Java devs & SecOps! 🚨 A critical SQL Injection vulnerability in ESAPI esapi-java-legacy's `Encoder.encodeForSQL` can lead to remote data compromise. Update to 2.7.0.0 immediately! 🛡️ Don't let this slip. #AppSec #SQLInjection #JavaSecurity tenable.com/cve/CVE-2025-5…

Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) exploit-db.com/papers/45517/ #Java #Sandbox #JavaSecurity #Phrack #ExploitDev #Infosec

🚨 CRITICAL: Hutool <5.8.4 lets attackers exploit QLExpressEngine for possible RCE—Java apps at risk! Audit & upgrade ASAP. Finance, health, gov sectors especially alert. Details: radar.offseq.com/threat/cve-202… #OffSeq #RCE #JavaSecurity

NetSPI Security Consultant Mayuri Bochare has published an insightful deep-dive on securing Java Spring applications through code review. 👉 Read the full article: ow.ly/IWfx50WnoVy #proactivesecurity #JavaSecurity #SecureCodeReview

Java security: sign without pin popup stackoverflow.com/questions/6652… #smartcard #java #javasecurity

What Makes #Java More Secure Than Other Languages? buff.ly/2c9Dwua #Javasecurity #webdevelopment

🔐 Java 25 (LTS) adds a new KDF API (JEP 510)! KDFs = algorithms that safely derive new keys from an existing secret. ✅ HKDF built in ✅ Secure key material generation ✅ Prepares Java for post-quantum crypto 🌐 #Java25 #JEP510 #JavaSecurity #Cryptography #PostQuantum

1.2 billion vulnerable Java dependencies are downloaded every month by open source consumers. Shockingly, 96% of these risky downloads could have been avoided.  #JavaSecurity #OpenSource #Cybersecurity #softwaresecuritysoftware

Why copy/paste is a dangerous coding technique: buff.ly/2xjxXjH @TheRegister #StackOverflow #JavaSecurity #securecoding

@Waratek Can Automatically Fix Security Flaws In #Java Apps #webapps @Forbes #javasecurity onforb.es/1BsgWF7

🚨 CRITICAL: HubSpot jinjava <2.8.1 flaw enables remote code execution via unsafe deserialization! Java app users at risk—patch now. 🔒 Details: radar.offseq.com/threat/cve-202… #OffSeq #CVE202559340 #JavaSecurity

Unlocking security flaws in web apps can lead to $50K in bug bounties! Java's URL handling & Spring Boot actuators reveal critical vulnerabilities. 💰🔍 #BugBounty #JavaSecurity #USA link: ift.tt/ydgCp0V

A serious vulnerability (CVE-2025-46762) in Apache Parquet Java allows remote code execution via insecure parquet-avro module schema parsing. All versions up to 1.15.1 are affected. Upgrade to 1.15.2. ⚠️ #JavaSecurity #DataBreach #USA link: ift.tt/OcZ1rBb

🚨 A critical RCE vulnerability (CVE-2025-24813) in Apache Tomcat is being exploited in the wild. Attackers can gain control with a single PUT API request! Affected versions include 9.0.98. #ApacheTomcat #JavaSecurity #USA link: ift.tt/GjoBUDz

🚨 A malicious Maven package disguises itself as scribejava-core, stealing OAuth credentials every 15th of the month. Targeting Java devs and FinTech apps, detection is tough! #JavaSecurity #FinTech #USA link: ift.tt/qgFmKox

A critical vulnerability, Log4Shell, exposed Apache Log4j for remote code execution. Discovered in 2021, attackers can exploit it via JNDI strings. This flaw impacts many Java applications. ⚠️ #JavaSecurity #Log4j #USA link: ift.tt/RwgtNhm

Usually #JavaSecurity concepts are hard to grasp. But have you tried the animated version? Join @martin_fmi at @VoxxedBucharest 2019 and get a better understanding using Java Security Animated tool. buff.ly/2XVlGke

Unpatched #Java Versions Blocked In OS X With #XProtect Update goo.gl/5Xxcfh #javasecurity #mac

Java security made practical🔐 At #Confitura2025, Tomasz Janczewski shares: 🔹 Spring Boot + OWASP in action 🔹 Common pitfalls devs miss 🔹 Simple habits for secure apps #JavaSecurity #SpringBoot #OWASP

Deserialization exploits in @Java : why should I Care? Now on @foojayio - @snyksec @BrianVerm's informative #DevSecOps talk @DevoxxUK. Watch now: hubs.ly/Q01gSYv00 #JavaSecurity

& our related guide by @BrianVerm & @rdebusscher ! #DevSecOps #DevOps #javasecurity payara.fish/resource/how-t…