Security News

Jif: Java + information flow (Reddit)
2015-11-21 22:21

Major Java Flaw - Deserialization (November 19, 2015) (SANS Newsbites)
2015-11-20 19:51

contrast-rO0 - a better fix for the java deserialization vulnerability (Reddit)
2015-11-13 17:05

Critical Java Bug Extends to Oracle, IBM Middleware (Threatpost)
2015-11-10 14:07

Researchers have built proof-of-concept exploits for an unpatched unserialize vulnerability in Apache Commons Collections, a library used in most Java rollouts.

Discovering Java Deserialization Issues - Burp Extension (Reddit)
2015-11-09 22:05

Remote Code Execution Flaw Found in Java App Servers (SecurityWeek)
2015-11-09 14:55

Fixing Java Serialization Bugs with SerialKiller (Reddit)
2015-11-09 13:48

Closing the Open Door of Java Object Serialization (Reddit)
2015-11-09 13:48

Java unserialize remote code execution hole hits Commons Collections, JBoss, WebSphere, WebLogic (ZDNet)
2015-11-09 13:48

Oracle Java 'no longer the greatest risk' to US Windows PC users (The Register)
2015-10-27 21:36