Serialization Is Still Java’s Biggest Attack Surface. What JEP 290 Actually Did and What It Didn’t

What JEP 290 actually did, what it genuinely left open, and how to write filters that hold up in the…

Read More »

The Post-Quantum Security Timeline for Java: JEP 496, JEP 527, and What Teams Should Do Now

If you manage Java services that handle sensitive data, 2026 is a year that deserves your attention. Not because quantum…

Read More »

OAuth 2.1 and the Death of Implicit Flow: What Every Java Developer Building Auth Needs to Update

OAuth 2.1 consolidates years of security best practices and formally retires the implicit grant, the resource owner password credentials grant,…

Read More »

Post-Quantum Cryptography in Java: What the NIST Standards Mean for Your TLS, JWT, and Key Management Code

In August 2024, NIST finalized the world’s first post-quantum cryptography standards. JDK 24 and 25 have already begun shipping the…

Read More »

Supply Chain Security for Java Projects: SBOMs, Vulnerability Scanning, and Dependency Management

The software supply chain has become a primary attack vector for malicious actors. From the infamous Log4Shell vulnerability to sophisticated…

Read More »

Runtime Security in Java: Input Validation, Sandboxing, Safe Deserialization

Your Java application just got pwned. An attacker sent a crafted JSON payload, your deserialization code helpfully executed it, and…

Read More »

Securing Java from the Start: Top DevSecOps Practices for Your Codebase

In today’s fast-paced software world, security can no longer be an afterthought. Java remains one of the most widely used…

Read More »

Configure HTTPS for Jersey Client in Java Applications

Secure communication is essential when integrating Java applications with external APIs over HTTPS. The Jersey Client API provides a convenient…

Read More »

Securing Java Pipelines with OWASP ZAP, SonarQube & Security Gates

Security is no longer something we “bolt on” at the end of development. In a modern DevSecOps culture, we embed…

Read More »