home.social

#java — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #java, aggregated by home.social.

  1. Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

    Microsoft Threat Intelligence observed a sophisticated human-operated campaign exploiting Microsoft Teams external collaboration features to impersonate IT helpdesk personnel. Attackers socially engineer users into granting remote access via legitimate remote monitoring tools. Once established, they deploy malicious MSI packages through PowerShell, staging a portable Node.js runtime and obfuscated JavaScript implant for persistent command execution. The campaign progresses through extensive Active Directory reconnaissance, periodic screenshot captures, and lateral movement via Windows Remote Management toward high-value infrastructure including domain controllers. Unlike commodity phishing operations, this hands-on-keyboard intrusion leverages legitimate tooling throughout, blending malicious activity into normal enterprise operations. The reconnaissance patterns and targeting of identity systems indicate precursor activity consistent with data theft, extortion, or ransomware deployment objectives.

    Pulse ID: 6a98ece13ef339971e686ab5
    Pulse Link: otx.alienvault.com/pulse/6a98e
    Pulse Author: AlienVault
    Created: 2026-09-03 03:43:29

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #CyberSecurity #DataTheft #DomainController #Extortion #InfoSec #Java #JavaScript #Microsoft #MicrosoftTeams #Nodejs #OTX #OpenThreatExchange #Phishing #PowerShell #RAT #RansomWare #Troll #Windows #bot #AlienVault

  2. Funfix Database — v0.5.2 release.

    Provides components built on top of RDBMSs. Currently, it provides a very useful "delayed queue". #Java, #Kotlin and #Scala library. Plays well with virtual threads & Scala version is powered by Cats-Effect.

    github.com/funfix/database/rel

  3. Your container image may be secure—and still leave attackers hidden. Mohammad-Ali A'râbi explains why traditional SBOMs miss discarded build stages and how BuildKit and Cosign help secure every step of your Java supply chain. Learn how to build verifiable Java container images: javapro.io/2026/09/03/the-pois

    #Java #SBOM #SupplyChainSecurity

  4. Java Language Essentials

    Introduction The Java programming language is associated with a default baseline which includes, but is not necessarily limited to, the following typical construction: Construction public class App { public static void main(String[] args) throws Exception { // code goes here } }

    novatopflex.wordpress.com/2026

  5. Java Language Essentials

    Introduction The Java programming language is associated with a default baseline which includes, but is not necessarily limited to, the following typical construction: Construction public class App { public static void main(String[] args) throws Exception { // code goes here } }

    novatopflex.wordpress.com/2026

  6. Java Language Essentials

    Introduction The Java programming language is associated with a default baseline which includes, but is not necessarily limited to, the following typical construction: Construction public class App { public static void main(String[] args) throws Exception { // code goes here } }

    novatopflex.wordpress.com/2026

  7. Java Language Essentials

    Introduction The Java programming language is associated with a default baseline which includes, but is not necessarily limited to, the following typical construction: Construction public class App { public static void main(String[] args) throws Exception { // code goes here } }

    novatopflex.wordpress.com/2026

  8. Java Language Essentials

    Introduction The Java programming language is associated with a default baseline which includes, but is not necessarily limited to, the following typical construction: Construction public class App { public static void main(String[] args) throws Exception { // code goes here } }

    novatopflex.wordpress.com/2026

  9. The Importance of the Java Programming Language

    Overview Java is a major programming language often taught in numerous institutions associated with the computer science and cybersecurity industries and is occasionally designed to serve as a relatively entry-level programming language overall. Different statuses for methods and related method calls include, but are not necessarily limited to, public, private, protected, and package. The importance of identifying the differences between the different statuses is particularly significant, […]

    novatopflex.wordpress.com/2026

  10. The Importance of the Java Programming Language

    Overview Java is a major programming language often taught in numerous institutions associated with the computer science and cybersecurity industries and is occasionally designed to serve as a relatively entry-level programming language overall. Different statuses for methods and related method calls include, but are not necessarily limited to, public, private, protected, and package. The importance of identifying the differences between the different statuses is particularly significant, […]

    novatopflex.wordpress.com/2026

  11. The Importance of the Java Programming Language

    Overview Java is a major programming language often taught in numerous institutions associated with the computer science and cybersecurity industries and is occasionally designed to serve as a relatively entry-level programming language overall. Different statuses for methods and related method calls include, but are not necessarily limited to, public, private, protected, and package. The importance of identifying the differences between the different statuses is particularly significant, […]

    novatopflex.wordpress.com/2026

  12. The Importance of the Java Programming Language

    Overview Java is a major programming language often taught in numerous institutions associated with the computer science and cybersecurity industries and is occasionally designed to serve as a relatively entry-level programming language overall. Different statuses for methods and related method calls include, but are not necessarily limited to, public, private, protected, and package. The importance of identifying the differences between the different statuses is particularly significant, […]

    novatopflex.wordpress.com/2026

  13. The Importance of the Java Programming Language

    Overview Java is a major programming language often taught in numerous institutions associated with the computer science and cybersecurity industries and is occasionally designed to serve as a relatively entry-level programming language overall. Different statuses for methods and related method calls include, but are not necessarily limited to, public, private, protected, and package. The importance of identifying the differences between the different statuses is particularly significant, […]

    novatopflex.wordpress.com/2026

  14. Chat the way you like. 🌱 See how Spring AI’s defaultSystem() turns a generic model reply into “Hello, Spring Fan!” with one prompt resource.

    Code: github.com/short-spring-tips/s

    #SpringAI #Java

  15. Both have their place: keep using the official SDK if you need #Java 8/11 or use other #Gemini features (embeddings, audio WebSockets). Pick the custom SDK for a more concise, modern Java 17+ experience.

  16. When the #Gemini Interactions API launched, the official Google GenAI #Java SDK didn't support it yet. To let Java developers build with interactions, managed agents, and sandboxes right away, I wrote an unofficial, purpose-built SDK.

  17. The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

    Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tampered Windows Installer package. The installer deploys genuine Exodus wallet version 24.33.4 with three modified files that prevent the user interface from displaying while establishing persistent access. The payload includes six modules providing hidden VNC, SOCKS proxy, browser credential theft, file management, remote shell, and script execution capabilities. Communication occurs via Azure Table Storage as a dead drop mechanism, avoiding traditional command and control domains. The RAT maintains persistence through scheduled tasks executing hourly and includes mechanisms to bypass corporate proxy configurations.

    Pulse ID: 6a9715c1c854df8423e1092b
    Pulse Link: otx.alienvault.com/pulse/6a971
    Pulse Author: AlienVault
    Created: 2026-09-01 18:13:21

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Azure #Browser #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #PDF #Proxy #RAT #SMS #ScriptExecution #VNC #Windows #bot #cryptocurrency #AlienVault

  18. The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

    Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tampered Windows Installer package. The installer deploys genuine Exodus wallet version 24.33.4 with three modified files that prevent the user interface from displaying while establishing persistent access. The payload includes six modules providing hidden VNC, SOCKS proxy, browser credential theft, file management, remote shell, and script execution capabilities. Communication occurs via Azure Table Storage as a dead drop mechanism, avoiding traditional command and control domains. The RAT maintains persistence through scheduled tasks executing hourly and includes mechanisms to bypass corporate proxy configurations.

    Pulse ID: 6a9715c1c854df8423e1092b
    Pulse Link: otx.alienvault.com/pulse/6a971
    Pulse Author: AlienVault
    Created: 2026-09-01 18:13:21

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Azure #Browser #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #PDF #Proxy #RAT #SMS #ScriptExecution #VNC #Windows #bot #cryptocurrency #AlienVault

  19. The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

    Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tampered Windows Installer package. The installer deploys genuine Exodus wallet version 24.33.4 with three modified files that prevent the user interface from displaying while establishing persistent access. The payload includes six modules providing hidden VNC, SOCKS proxy, browser credential theft, file management, remote shell, and script execution capabilities. Communication occurs via Azure Table Storage as a dead drop mechanism, avoiding traditional command and control domains. The RAT maintains persistence through scheduled tasks executing hourly and includes mechanisms to bypass corporate proxy configurations.

    Pulse ID: 6a9715c1c854df8423e1092b
    Pulse Link: otx.alienvault.com/pulse/6a971
    Pulse Author: AlienVault
    Created: 2026-09-01 18:13:21

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Azure #Browser #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #PDF #Proxy #RAT #SMS #ScriptExecution #VNC #Windows #bot #cryptocurrency #AlienVault

  20. The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

    Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tampered Windows Installer package. The installer deploys genuine Exodus wallet version 24.33.4 with three modified files that prevent the user interface from displaying while establishing persistent access. The payload includes six modules providing hidden VNC, SOCKS proxy, browser credential theft, file management, remote shell, and script execution capabilities. Communication occurs via Azure Table Storage as a dead drop mechanism, avoiding traditional command and control domains. The RAT maintains persistence through scheduled tasks executing hourly and includes mechanisms to bypass corporate proxy configurations.

    Pulse ID: 6a9715c1c854df8423e1092b
    Pulse Link: otx.alienvault.com/pulse/6a971
    Pulse Author: AlienVault
    Created: 2026-09-01 18:13:21

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Azure #Browser #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #PDF #Proxy #RAT #SMS #ScriptExecution #VNC #Windows #bot #cryptocurrency #AlienVault

  21. The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

    Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tampered Windows Installer package. The installer deploys genuine Exodus wallet version 24.33.4 with three modified files that prevent the user interface from displaying while establishing persistent access. The payload includes six modules providing hidden VNC, SOCKS proxy, browser credential theft, file management, remote shell, and script execution capabilities. Communication occurs via Azure Table Storage as a dead drop mechanism, avoiding traditional command and control domains. The RAT maintains persistence through scheduled tasks executing hourly and includes mechanisms to bypass corporate proxy configurations.

    Pulse ID: 6a9715c1c854df8423e1092b
    Pulse Link: otx.alienvault.com/pulse/6a971
    Pulse Author: AlienVault
    Created: 2026-09-01 18:13:21

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Azure #Browser #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #PDF #Proxy #RAT #SMS #ScriptExecution #VNC #Windows #bot #cryptocurrency #AlienVault

  22. Apache NetBeans 31 chega com suporte avançado para Java e PHP 8.4. A Fundação Apache lançou a versão 31 do seu ambiente de desenvolvimento integrado, trazendo melhorias significativas para Java e PHP.

    🔗 tugatech.com.pt/t90327-apache-

    #apache #java #php #suporte 

  23. Switches to Node.js and JavaScript malware

    Pulse ID: 6a97ef47a45ba2531a04b173
    Pulse Link: otx.alienvault.com/pulse/6a97e
    Pulse Author: Tr1sa111
    Created: 2026-09-02 09:41:27

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #CyberSecurity #InfoSec #Java #JavaScript #Malware #Nodejs #OTX #OpenThreatExchange #bot #Tr1sa111

  24. Milliseconds are slow when your competition measures latency in microseconds. Stefan Angelov shares practical Java techniques—from JIT optimization and off-heap memory to sharding and object pooling—to build ultra-fast systems.

    Learn how to push Java to its limits: javapro.io/2026/09/02/achievin

    #Java #Performance #LowLatency

  25. Nächste Woche starten wir nach der Sommerpause wieder durch: @thjanssen123 als "alter Hase" wird mit uns in 60 Minuten eine produktionsnahe #springai Anwendung bauen. Newcomer @mnafshin wird uns zeigen wie ihr euere #Docker Images optimiert. Kommt vorbei und meldet euch an eventbrite.com/e/spring-ai-liv #java #spring #genai

  26. I built github.com/dashaun/spring-ai-a, a zero-configuration #SpringBoot starter that brings AGENTS.md support to #SpringAI applications.

    Add the starter, build your ChatClient normally, and the applicable repository instructions are added automatically.

    It supports nested instruction precedence, configurable safety limits, privacy-conscious observability, and a working coding-agent demo.

    #Java #AgentsMD #AI #OpenSource