Security News

January 2019 Patch Tuesday forecast: Partly cloudy followed by heavy fog around Java
2019-01-07 06:45

2018 ended with a bit of excitement. Shortly after November Patch Tuesday we saw a pair of Flash Player zero-days (November 20 and December 5), which were followed by just about everything...

Q3 Oracle CPU Preview:  Fewer Java SE Patches May Not Mean Fewer Flaws
2018-07-16 16:54

The July 2018 quarterly Oracle Critical Patch Update (CPU) is expected to set a new two-year high for total Oracle product patches.

Misconfiguration of Java web server component Jolokia puts orgs at risk
2018-06-25 15:52

You gotta shore it up before you put it to work, says researcher Misconfiguration of a commonly used Java web server component could create multiple risks, according to security researcher Mat Mannion.…

Week in review: Email tracking, DNS exfiltration, and secure coding in Java
2017-10-09 01:10

Here’s an overview of some of last week’s most interesting news and articles: Leaving employees to manage their own password security is a mistake Despite the clear and present danger that weak...

Secure coding in Java: Bad online advice and confusing APIs
2017-10-03 15:15

For programmers and software developers, the Internet forums provide a great place to exchange knowledge and seek answers to concrete coding conundrums. Alas, they are not always the source of...

Hundreds of Java Flaws Patched by Schneider in Trio TView Software (Security Week)
2017-07-21 16:42

Energy management and automation solutions giant Schneider Electric was informed by a researcher that its Trio TView software uses a version of Java that was released in 2011 and is affected by...

ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs (Threatpost)
2017-04-25 16:36

Adobe released an important security hotfix for several versions of Coldfusion, resolving two bugs, Tuesday morning.

Facebook Delegated Account Recovery SDKs Published for Java, Ruby Apps (Threatpost)
2017-04-18 17:45

At F8 today, Facebook released SDKs and documentation for the integration of Delegated Account Recovery into Java, NodeJS and Ruby applications.

Wave of Java-Based RATs Target Tax Filers (Threatpost)
2017-04-17 19:13

A rash of Java-based remote access Trojans is targeting tax filers with bogus IRS attachments.