Java Security
Security | News, how-tos, features, reviews, and videos
Open-source developers targeted in sophisticated malware attack
Developers who publish their code on GitHub have been targeted in an attack campaign that uses a little known but potent cyberespionage malware.
46% off CyberPower Surge Protector 3-AC Outlet with 2 USB (2.1A) Charging Ports - Deal Alert
This compact surge protector provides 600 joules of protection, 3 outlets, and a folding wall tap plug. Two USB ports (2.1 Amp) charge personal electronics, including smartphones, digital cameras, MP3 players, and other devices.
Critical flaw alert! Stop using JSON encryption
Developers shouldn't use JSON Web Tokens or JSON Web Encryption in their applications at all, lest their private keys get stolen
Oracle sets priorities for Java 9 bug fixes
Speeding toward the Java 9 release date, Oracle will address only the highest priority bugs before July 27
Google tries to beat AWS at cloud security
New tools that protect enterprise applications running on Google Cloud Platform may help take the spotlight away from AWS and Microsoft Azure
Hackers exploit Apache Struts vulnerability to compromise corporate web servers
Attackers are widely exploiting a recently patched vulnerability in Apache Struts that allows them to remotely execute malicious code on web servers.
Java and Python FTP attacks can punch holes through firewalls
The Java and Python runtimes fail to properly validate FTP URLs, which can potentially allow attackers to punch holes through firewalls to access local networks
5 open source security tools too good to ignore
Look to these clever open source tools to keep secrets out of source code, identify malicious files, block malicious processes, and keep endpoints safe
Experts worried about ransomware hitting critical infrastructure
Ransomware is capable of shutting down computer systems that manage public utilities and private industry--experts say it's only a matter of when
25% off Kuna Smart Home Security Outdoor Light & Camera - Deal Alert
Night or day, Kuna’s smart outdoor security camera system detects movement at your door and sends actionable alerts to your mobile device, allowing you to safely take action using Kuna’s lights, HD live video feed, two-way intercom,...
Open source users: It’s time for extreme vetting
Red Hat's cybersecurity strategist says open source code must be more carefully vetted, and developers are the ones to do it
GitLab database goes out after spam attack
Approximately six hours of data, including issues, merge requests, users, comments, and snippets, will be lost as GitLab restores from a backup
41% off Netgear Arlo Security System Wireless HD Camera, Indoor/Outdoor, Night Vision - Deal Alert
Arlo Smart Home Security Cameras are wireless, HD, Indoor/Outdoor video cameras for home monitoring. Motion activated cameras initiate automatic recording and alert you via email or app notifications.
InfoWorld's 2017 Technology of the Year Award winners
InfoWorld editors and reviewers pick the year's best hardware, software, development tools, and cloud services
Researchers propose a way to use your heartbeat as a password
Researchers at Binghamton State University have proposed a model that uses patients' heartbeats as an encryption key for electronic records.
Attackers start wiping data from CouchDB and Hadoop databases
Researchers are reporting data wiping attacks hitting openly accessible Hadoop and CouchDB deployments.
Oracle to Java devs: Stop signing JAR files with MD5
Starting in April, if a JAR file is signed with MD5, Oracle will treat it as unsigned
43% off Microsoft Wireless Desktop 900 Keyboard and Mouse Bundle - Deal Alert
The Wireless Desktop 900 keyboard has quiet-touch keys, and the full-size ambidextrous mouse provides comfortable, precise navigation. The Wireless Desktop 900 also includes Advanced Encryption Standard to help protect your...
Git Hound, Truffle Hog root out GitHub leaks
The two open source tools check for cyptographic keys and other sensitive information in code saved on GitHub and offers warnings if secrets are at risk
Exposed MongoDB installs being erased, held for ransom
A nonprofit dedicated to making the internet safer is urging administrators to check their MongoDB installations
Sponsored Links