Java

Handling Log4Shell vulnerability

on 18 Dec 2021

Handling Log4Shell vulnerability

Summarizing the current state of advice regarding the Log4j vulnerability.

Java Deserialization Vulnerabilities

on 25 Jun 2016

Java Deserialization Vulnerabilities

I’ve had the chance to speak about Java Deserialization Vulnerabilities at the OWASP AppSecEU conference in Rome.

Java Deserialization Security FAQ

on 27 Apr 2016

Java Deserialization Security FAQ

Details about the vulnerability class Untrusted Deserialization.

Best Practice ·Conference ·Vulnerability