Java

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

enterprise, IBM, Java, News, open source, Red Hat, vulnerability assessment, vulnerability management /

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 2026-10-08 at 07:18 By Anamarija Pogorelec IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies already run in production. Companies running the […]

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws Read More »

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers

Black Hat, Black Hat USA 2026, conferences, CVE, cybersecurity, Don't miss, Hot stuff, Java, News, Novee, research /

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers 2026-08-05 at 21:45 By Mirko Zorz An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request arrives unauthenticated. From there the attacker runs code on the host. Bonita BPM handles […]

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers Read More »

Java 26 ships with new cryptography API and HTTP/3 support

Encryption, Java, News, Oracle /

Java 26 ships with new cryptography API and HTTP/3 support 2026-03-19 at 09:59 By Anamarija Pogorelec Oracle released JDK 26, the 17th consecutive feature release delivered under the six-month cadence the project adopted in 2018. The release includes ten JDK Enhancement Proposals spanning language changes, garbage collection improvements, cryptographic tooling, and network protocol support. PEM […]

Java 26 ships with new cryptography API and HTTP/3 support Read More »

PRevent: Open-source tool to detect malicious code in pull requests

Apiiro, code analysis, Don't miss, GitHub, Hot stuff, Java, JavaScript, Kotlin, News, open source, PHP, programming, Python, Ruby, software development, threat detection /

PRevent: Open-source tool to detect malicious code in pull requests 2025-02-20 at 16:52 By Zeljka Zorz Apiiro security researchers have released open source tools that can help organizations detect malicious code as part of their software development lifecycle: PRevent (a scanner for pull requests), and a malicious code detection ruleset for Semgrep and Opengrep static […]

PRevent: Open-source tool to detect malicious code in pull requests Read More »

Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)

CVE, Don't miss, enterprise, Hot stuff, Java, MSP, News, SMBs, vulnerability /

Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986) 2024-08-15 at 14:45 By Zeljka Zorz SolarWinds has fixed a critical vulnerability (CVE-2024-28986) in its Web Help Desk (WHD) solution that may allow attackers to run commands on the host machine. “While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce […]

Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986) Read More »

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

Android, CVE, DevOps, Don't miss, Hot stuff, Java, JetBrains, Kotlin, News, software development, vulnerability /

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) 2024-06-11 at 15:46 By Zeljka Zorz JetBrains has fixed a critical vulnerability (CVE-2024-37051) that could expose users of its integrated development environments (IDEs) to GitHub access token compromise. About CVE-2024-37051 JetBrains offers IDEs for various programming languages. CVE-2024-37051 is a vulnerability in the […]

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) Read More »

Uncovering The New Java-Based SAW RAT’s Infiltration Strategy via LNK files

Java, Java Runtime Environment, Remote Access Trojan, Saw RAT, trojan /

Uncovering The New Java-Based SAW RAT’s Infiltration Strategy via LNK files 29/11/2023 at 15:02 By cybleinc CRIL analyzes a new Java-based RAT – SAW that infiltrates users’ systems via LNK files. The post Uncovering The New Java-Based SAW RAT’s Infiltration Strategy via LNK files appeared first on Cyble. This article is an excerpt from Cyble […]

Uncovering The New Java-Based SAW RAT’s Infiltration Strategy via LNK files Read More »

New Java-Based Rude Stealer abuses DirectX Diagnostic Tool

Discord, infostealer, Java, Malware, Rude Stealer, Steam, Telegram, Windows /

New Java-Based Rude Stealer abuses DirectX Diagnostic Tool 20/11/2023 at 14:31 By cybleinc CRIL analyzes Rude Stealer – a Java-based stealer capable of exfiltrating a wide range of information from infected systems. The post New Java-Based Rude Stealer abuses DirectX Diagnostic Tool appeared first on Cyble. This article is an excerpt from Cyble View Original […]

New Java-Based Rude Stealer abuses DirectX Diagnostic Tool Read More »

New Java-Based Sayler RAT Targets Polish Speaking Users

Adobe Illustrator, Crypter Ransomware, Java, Keylogger, Polish, Remote Access Trojan, Sayler, Threat Intelligence /

New Java-Based Sayler RAT Targets Polish Speaking Users 02/11/2023 at 13:16 By cybleinc Key Takeaways Overview On October 25th, CRIL came across an undetected Java Archive (JAR) file named “Java.jar” on VirusTotal. Upon investigation, it was determined that the JAR file is a new Remote Access Trojan named “Sayler.” Sayler RAT is designed to provide […]

New Java-Based Sayler RAT Targets Polish Speaking Users Read More »

The hidden costs of Java, and the impact of pricing changes

Azul, Cloud, cloud computing, CVE, cybersecurity, Java, Log4j, News, open source, Oracle, report, survey /

The hidden costs of Java, and the impact of pricing changes 01/11/2023 at 07:01 By Help Net Security An overwhelming 98% of all the businesses surveyed use Java in their software applications or infrastructure, and 57% of those organizations indicate that Java is the backbone of most of their applications, according to Azul. When including […]

The hidden costs of Java, and the impact of pricing changes Read More »

Scroll to Top