#javasecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #javasecurity, aggregated by home.social.
-
Semgrep is not a replacement for review. It is a cheap way to stop one bad pattern early.
I wrote a Quarkus walkthrough that builds a small document API, then blocks concatenated native queries in agent-generated Java with Semgrep, pre-commit, AGENTS.md, and CI.
https://www.the-main-thread.com/p/quarkus-semgrep-agent-security-guardrails
-
Semgrep is not a replacement for review. It is a cheap way to stop one bad pattern early.
I wrote a Quarkus walkthrough that builds a small document API, then blocks concatenated native queries in agent-generated Java with Semgrep, pre-commit, AGENTS.md, and CI.
https://www.the-main-thread.com/p/quarkus-semgrep-agent-security-guardrails
-
Still treating security as something you bolt on later? #Java25 brings security into the language itself. Mihaela Gheorghe-Roman breaks down how sealed classes, records & pattern matching close entire classes of vulnerabilities. → https://javapro.io/2025/12/30/security-in-the-age-of-java-25-new-language-tools-for-safer-code/
-
Still treating security as something you bolt on later? #Java25 brings security into the language itself. Mihaela Gheorghe-Roman breaks down how sealed classes, records & pattern matching close entire classes of vulnerabilities. → https://javapro.io/2025/12/30/security-in-the-age-of-java-25-new-language-tools-for-safer-code/
-
Join us for this live-coding webinar tomorrow & get hands on guidance for improving authentication, authorization, and runtime validation in your Java applications!
https://www.crowdcast.io/c/modern-java-security#Java #JavaEE #JakartaEE #JavaDeveloper #Security #JavaSecurity #PayaraCommunity @jakartaee
-
Axiom JDK: криптография «из коробки» и подключение ГОСТ-провайдеров
Приглашаем на
https://habr.com/ru/companies/axiomjdk/articles/968332/
#axiomjdk #java #криптография #безопасность #javasecurity #tls #вебинар #axiom_jdk #шифрование #аутентификация
-
Wenn hashCode(), lügt wird die #HashMap inkonsistent. Im sicherheitskritischen Bereich fatal: Lookup-Ausfall, Authorization Bypass, Resource Lock Hijack — alles möglich. @svenruppert liefert eine genaue Analyse mit interaktiver #Vaadin-Demo: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
-
Wenn hashCode(), lügt wird die #HashMap inkonsistent. Im sicherheitskritischen Bereich fatal: Lookup-Ausfall, Authorization Bypass, Resource Lock Hijack — alles möglich. @svenruppert liefert eine genaue Analyse mit interaktiver #Vaadin-Demo: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
-
Mutable Schlüssel in #HashMaps können zu unsichtbaren Einträgen führen. Warum hashCode()-Änderungen fatale Folgen für Lookup, Security & Konsistenz haben, zeigt @svenruppert in der interaktiven #Vaadin-Demo. Teste es: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
#Vaadin #Java #JavaSecurity @Vaadin
-
Mutable Schlüssel in #HashMaps können zu unsichtbaren Einträgen führen. Warum hashCode()-Änderungen fatale Folgen für Lookup, Security & Konsistenz haben, zeigt @svenruppert in der interaktiven #Vaadin-Demo. Teste es: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
#Vaadin #Java #JavaSecurity @Vaadin
-
⚠️ Androxgh0st botnet is back and evolving
🎯 Targets US universities including UC San Diego
💥 Uses RCE, JNDI, OGNL, web shells
🛡️ Patch devices now!
🔗 https://hackread.com/androxgh0st-botnet-expand-exploit-us-university-servers/
-
⚠️ Androxgh0st botnet is back and evolving
🎯 Targets US universities including UC San Diego
💥 Uses RCE, JNDI, OGNL, web shells
🛡️ Patch devices now!
🔗 https://hackread.com/androxgh0st-botnet-expand-exploit-us-university-servers/
-
Wie entsteht aus der harmlosen #HashMap ein Sicherheitsrisiko? Ganz einfach: mutable Schlüssel + veränderte Attribute = unsichtbare Einträge. Perfekter Nährboden für Angriffe!
@svenruppert zeigt Probleme & Strategien zur Vermeidung: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
-
Wie entsteht aus der harmlosen #HashMap ein Sicherheitsrisiko? Ganz einfach: mutable Schlüssel + veränderte Attribute = unsichtbare Einträge. Perfekter Nährboden für Angriffe!
@svenruppert zeigt Probleme & Strategien zur Vermeidung: https://javapro.io/de/wenn-hashcode-luegt-und-equals-hilflos-ist/
-
Mutable hashCode() in Java keys = recipe for disaster ☠️
#JavaSecurity #HashMap #Java #SecureCoding #Vaadin https://svenruppert.com/2025/06/06/if-hashcode-lies-and-equals-is-helpless/ -
Mutable hashCode() in Java keys = recipe for disaster ☠️
#JavaSecurity #HashMap #Java #SecureCoding #Vaadin https://svenruppert.com/2025/06/06/if-hashcode-lies-and-equals-is-helpless/ -
#Java Cryptography Architecture (JCA) - An Overview
Provider-based crypto framework enables secure hashing, digital signatures, key management & more — all modular, extensible, and ready for real-world security needs. #JavaSecurity #Cryptography #JCA #SecureCoding
https://svenruppert.com/2025/04/03/java-cryptography-architecture-jca-an-overview/
-
#Java Cryptography Architecture (JCA) - An Overview
Provider-based crypto framework enables secure hashing, digital signatures, key management & more — all modular, extensible, and ready for real-world security needs. #JavaSecurity #Cryptography #JCA #SecureCoding
https://svenruppert.com/2025/04/03/java-cryptography-architecture-jca-an-overview/
-
🚀 New article: Boost your security skills with my latest guide on essential #application #security #testing!
Explore SCA, SAST, DAST, and PenTest to protect your projects from vulnerabilities.#JavaSecurity #Cybersecurity #AppSec #SecurityTesting
https://ionutbalosin.com/2025/03/security-application-testing-for-java-developers
-
🚀 New article: Boost your security skills with my latest guide on essential #application #security #testing!
Explore SCA, SAST, DAST, and PenTest to protect your projects from vulnerabilities.#JavaSecurity #Cybersecurity #AppSec #SecurityTesting
https://ionutbalosin.com/2025/03/security-application-testing-for-java-developers
-
Java serialization was seen as magic, enabling easy data persistence without the portability issues of C. But today, it's considered 'the gift that keeps giving' for security vulnerabilities. Let's explore why & how to mitigate these risks #JavaSecurity https://debugagent.com/java-serialization-filtering-prevent-0-day-security-vulnerabilities
-
Java serialization was seen as magic, enabling easy data persistence without the portability issues of C. But today, it's considered 'the gift that keeps giving' for security vulnerabilities. Let's explore why & how to mitigate these risks #JavaSecurity https://debugagent.com/java-serialization-filtering-prevent-0-day-security-vulnerabilities
-
🔐 In the connected world, securing digital data has become a necessity. Dive into the world of symmetric encryption algorithms in #Java and learn how to keep your data safe. Check out the article here: https://buff.ly/491EJhh #CyberSecurity #JavaSecurity
-
🔐 In the connected world, securing digital data has become a necessity. Dive into the world of symmetric encryption algorithms in #Java and learn how to keep your data safe. Check out the article here: https://buff.ly/491EJhh #CyberSecurity #JavaSecurity
-
✍️ Creating a secure Java application? This article by @snyksec covers everything you need to know about symmetric encryption algorithms in Java. Don't miss out! #JavaSecurity #Encryption 👉 https://buff.ly/45Itpnj
-
✍️ Creating a secure Java application? This article by @snyksec covers everything you need to know about symmetric encryption algorithms in Java. Don't miss out! #JavaSecurity #Encryption 👉 https://buff.ly/45Itpnj
-
Avoid Reflective and Stored XSS attacks in your Java web app. Snyk Code can help identify vulnerabilities and pinpoint their exact location. #JavaSecurity #XSS #SnykCode https://t.co/03dKe1xBKK https://t.co/KpJxmUeGrE
-
Avoid Reflective and Stored XSS attacks in your Java web app. Snyk Code can help identify vulnerabilities and pinpoint their exact location. #JavaSecurity #XSS #SnykCode https://t.co/03dKe1xBKK https://t.co/KpJxmUeGrE
-
Avoid Reflective and Stored XSS attacks in your Java web app. Snyk Code can help identify vulnerabilities and pinpoint their exact location. #JavaSecurity #XSS #SnykCode https://t.co/03dKe1xBKK https://t.co/2Elx044VvE
-
Avoid Reflective and Stored XSS attacks in your Java web app. Snyk Code can help identify vulnerabilities and pinpoint their exact location. #JavaSecurity #XSS #SnykCode https://t.co/03dKe1xBKK https://t.co/2Elx044VvE
-
CW: Test automation
How to fuzz Java projects in Gradle using CI Fuzz CLI
We open-sourced CI Fuzz CLI, a fuzz testing solution for Java, that integrates into JUnit and other popular dev tools.
I’ve created a tutorial to show how easy it can be to uncover vulnerabilities in Java applications using CI Fuzz CLI in #Gradle.More of this in my live stream next week: https://www.code-intelligence.com/webinar/beyond-unit-testing
-
CW: Test automation
How to fuzz Java projects in Gradle using CI Fuzz CLI
We open-sourced CI Fuzz CLI, a fuzz testing solution for Java, that integrates into JUnit and other popular dev tools.
I’ve created a tutorial to show how easy it can be to uncover vulnerabilities in Java applications using CI Fuzz CLI in #Gradle.More of this in my live stream next week: https://www.code-intelligence.com/webinar/beyond-unit-testing
-
We open-source our CLI fuzzing solution for Java ☕
With CI Fuzz CLI, you can now deploy fuzz testing to uncover blind spots in your Java code.
The CLI tool can be incorporated into existing unit testing frameworks (e.g., JUnit) using three basic commands on your command line or IDE.
If you ever ran a unit test, you will be able to use CI Fuzz CLI.
Compatible with #Maven and #Gradle.
Check out the repo: https://github.com/CodeIntelligenceTesting/cifuzz