Critical vulnerability 'CVE-2026-91403' in Java: The truth is the eMudhra certificate issue | Patched versions and what to do if you cannot update

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...

Vulnerability in Java too. The 'real deal' arrives the day after the regular patch. Is an old version of Java lurking in your apps, too?

This week, it's PHP, Node.js, and JavaSecurity topics have been continuing this week. I've written about PHP and Node.js, and ...
ZDNet

How big a security risk is Java? Can you really quit using it?

Update January 10, 2013: A zero-day exploit is in the wild, attacking fully patched versions of Java. You can protect yourself by disabling the Java plugin from your ...
InfoWorld

How to use generics in your Java programs

Generics make your code more flexible and easier to read, and they help you avoid ClassCastExceptions at runtime. Get started with this introduction to using generics with the Java Collections ...
CSOonline

Java deserialization vulnerabilities explained and how to defend against them

Java provides a means to conveniently serialize data to maintain its integrity as it's sent over a network. Attackers can exploit vulnerabilities in the deserialization process if there aren't ...