#javasecurity search results
๐จ CRITICAL: Hutool <5.8.4 lets attackers exploit QLExpressEngine for possible RCEโJava apps at risk! Audit & upgrade ASAP. Finance, health, gov sectors especially alert. Details: radar.offseq.com/threat/cve-202โฆ #OffSeq #RCE #JavaSecurity
Java security made practical๐ At #Confitura2025, Tomasz Janczewski shares: ๐น Spring Boot + OWASP in action ๐น Common pitfalls devs miss ๐น Simple habits for secure apps #JavaSecurity #SpringBoot #OWASP
๐ Java 25 (LTS) adds a new KDF API (JEP 510)! KDFs = algorithms that safely derive new keys from an existing secret. โ HKDF built in โ Secure key material generation โ Prepares Java for post-quantum crypto ๐ #Java25 #JEP510 #JavaSecurity #Cryptography #PostQuantum
๐จ CRITICAL: HubSpot jinjava <2.8.1 flaw enables remote code execution via unsafe deserialization! Java app users at riskโpatch now. ๐ Details: radar.offseq.com/threat/cve-202โฆ #OffSeq #CVE202559340 #JavaSecurity
1.2 billion vulnerable Java dependencies are downloaded every month by open source consumers. Shockingly, 96% of these risky downloads could have been avoided.ย #JavaSecurity #OpenSource #Cybersecurity #softwaresecuritysoftware
Is Java safe in 2025? Explore security flaws, features, and whether Java is outdated or still a reliable choice for developers. bit.ly/IsJavaSafe #IsJavaSafe #JavaSecurity #WebDevelopment #DevCommunity #JavaProgramming
NetSPI Security Consultant Mayuri Bochare has published an insightful deep-dive on securing Java Spring applications through code review. ๐ Read the full article: ow.ly/IWfx50WnoVy #proactivesecurity #JavaSecurity #SecureCodeReview
J is for Java Security: Keep your Java applications secure and up-to-date with ExtremeVPN. Stay protected from Java-related vulnerabilities and ensure the safety of your digital assets. #JavaSecurity #ExtremeVPN #CyberSecurity #JavaApps #OnlineSafety #DataProtection
๐ Stop treating JWT validation as an afterthought. Spring Security + OAuth2 makes it first-class. #JavaSecurity
IBM Standards Processing Engine: Critical Java Deserialization Bug CVE-2023-49886 allows remote code execution via unsafe Java deserialization. Immediate patching is recommended. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #JavaSecurityโฆ
๐ก๏ธ Spring Security + JWT = your REST API's best defense. Learn how to build a secure authentication flow. #JavaSecurity
Apache Parquet flaw in Java tool lets attackers run code via crafted files, putting big data apps using Hadoop and Spark at critical risk. #CyberSecurity #BigData #JavaSecurity
๐ Secure like a pro: Validate JWTs in your Spring apps with confidence using OAuth2 Resource Server. #JavaSecurity
Unlocking security flaws in web apps can lead to $50K in bug bounties! Java's URL handling & Spring Boot actuators reveal critical vulnerabilities. ๐ฐ๐ #BugBounty #JavaSecurity #USA link: ift.tt/ydgCp0V
A serious vulnerability (CVE-2025-46762) in Apache Parquet Java allows remote code execution via insecure parquet-avro module schema parsing. All versions up to 1.15.1 are affected. Upgrade to 1.15.2. โ ๏ธ #JavaSecurity #DataBreach #USA link: ift.tt/OcZ1rBb
๐จ A critical RCE vulnerability (CVE-2025-24813) in Apache Tomcat is being exploited in the wild. Attackers can gain control with a single PUT API request! Affected versions include 9.0.98. #ApacheTomcat #JavaSecurity #USA link: ift.tt/GjoBUDz
๐จ A malicious Maven package disguises itself as scribejava-core, stealing OAuth credentials every 15th of the month. Targeting Java devs and FinTech apps, detection is tough! #JavaSecurity #FinTech #USA link: ift.tt/qgFmKox
A critical vulnerability, Log4Shell, exposed Apache Log4j for remote code execution. Discovered in 2021, attackers can exploit it via JNDI strings. This flaw impacts many Java applications. โ ๏ธ #JavaSecurity #Log4j #USA link: ift.tt/RwgtNhm
IBM Standards Processing Engine: Critical Java Deserialization Bug CVE-2023-49886 allows remote code execution via unsafe Java deserialization. Immediate patching is recommended. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #JavaSecurityโฆ
Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) exploit-db.com/papers/45517/ #Java #Sandbox #JavaSecurity #Phrack #ExploitDev #Infosec
๐จ CRITICAL: Hutool <5.8.4 lets attackers exploit QLExpressEngine for possible RCEโJava apps at risk! Audit & upgrade ASAP. Finance, health, gov sectors especially alert. Details: radar.offseq.com/threat/cve-202โฆ #OffSeq #RCE #JavaSecurity
NetSPI Security Consultant Mayuri Bochare has published an insightful deep-dive on securing Java Spring applications through code review. ๐ Read the full article: ow.ly/IWfx50WnoVy #proactivesecurity #JavaSecurity #SecureCodeReview
Java security: sign without pin popup stackoverflow.com/questions/6652โฆ #smartcard #java #javasecurity
๐ Java 25 (LTS) adds a new KDF API (JEP 510)! KDFs = algorithms that safely derive new keys from an existing secret. โ HKDF built in โ Secure key material generation โ Prepares Java for post-quantum crypto ๐ #Java25 #JEP510 #JavaSecurity #Cryptography #PostQuantum
Why copy/paste is a dangerous coding technique: buff.ly/2xjxXjH @TheRegister #StackOverflow #JavaSecurity #securecoding
1.2 billion vulnerable Java dependencies are downloaded every month by open source consumers. Shockingly, 96% of these risky downloads could have been avoided.ย #JavaSecurity #OpenSource #Cybersecurity #softwaresecuritysoftware
@Waratek Can Automatically Fix Security Flaws In #Java Apps #webapps @Forbes #javasecurity onforb.es/1BsgWF7
๐จ CRITICAL: HubSpot jinjava <2.8.1 flaw enables remote code execution via unsafe deserialization! Java app users at riskโpatch now. ๐ Details: radar.offseq.com/threat/cve-202โฆ #OffSeq #CVE202559340 #JavaSecurity
A serious vulnerability (CVE-2025-46762) in Apache Parquet Java allows remote code execution via insecure parquet-avro module schema parsing. All versions up to 1.15.1 are affected. Upgrade to 1.15.2. โ ๏ธ #JavaSecurity #DataBreach #USA link: ift.tt/OcZ1rBb
Unlocking security flaws in web apps can lead to $50K in bug bounties! Java's URL handling & Spring Boot actuators reveal critical vulnerabilities. ๐ฐ๐ #BugBounty #JavaSecurity #USA link: ift.tt/ydgCp0V
๐จ A critical RCE vulnerability (CVE-2025-24813) in Apache Tomcat is being exploited in the wild. Attackers can gain control with a single PUT API request! Affected versions include 9.0.98. #ApacheTomcat #JavaSecurity #USA link: ift.tt/GjoBUDz
๐จ A malicious Maven package disguises itself as scribejava-core, stealing OAuth credentials every 15th of the month. Targeting Java devs and FinTech apps, detection is tough! #JavaSecurity #FinTech #USA link: ift.tt/qgFmKox
A critical vulnerability, Log4Shell, exposed Apache Log4j for remote code execution. Discovered in 2021, attackers can exploit it via JNDI strings. This flaw impacts many Java applications. โ ๏ธ #JavaSecurity #Log4j #USA link: ift.tt/RwgtNhm
Usually #JavaSecurity concepts are hard to grasp. But have you tried the animated version? Join @martin_fmi at @VoxxedBucharest 2019 and get a better understanding using Java Security Animated tool. buff.ly/2XVlGke
Java security made practical๐ At #Confitura2025, Tomasz Janczewski shares: ๐น Spring Boot + OWASP in action ๐น Common pitfalls devs miss ๐น Simple habits for secure apps #JavaSecurity #SpringBoot #OWASP
& our related guide by @BrianVerm & @rdebusscher ! #DevSecOps #DevOps #javasecurity payara.fish/resource/how-tโฆ
Deserialization exploits in @Java : why should I Care? Now on @foojayio - @snyksec @BrianVerm's informative #DevSecOps talk @DevoxxUK. Watch now: hubs.ly/Q01gSYv00 #JavaSecurity
Something went wrong.
Something went wrong.
United States Trends
- 1. #BornOfStarlightHeeseung 34.5K posts
- 2. Happy Birthday Charlie 77.8K posts
- 3. #csm217 N/A
- 4. #tuesdayvibe 4,579 posts
- 5. Alex Jones 17.7K posts
- 6. Sandy Hook 4,583 posts
- 7. Pentagon 82K posts
- 8. Good Tuesday 37.3K posts
- 9. #NationalDessertDay N/A
- 10. #PortfolioDay 4,622 posts
- 11. Shilo 2,990 posts
- 12. Monad 207K posts
- 13. Dissidia 8,055 posts
- 14. Masuda 1,906 posts
- 15. Victory Tuesday 1,318 posts
- 16. Larry Fink 6,873 posts
- 17. Martin Sheen 7,312 posts
- 18. Time Magazine 22.3K posts
- 19. Happy Heavenly 11.4K posts
- 20. Janet Mills 2,410 posts