Vulnerability
Handling Log4Shell vulnerability
Summarizing the current state of advice regarding the Log4j vulnerability.
Conference
Archived
Java Deserialization Vulnerabilities
I’ve had the chance to speak about Java Deserialization Vulnerabilities at the OWASP AppSecEU conference in Rome.
Vulnerability
Archived
Java Deserialization Security FAQ
Details about the vulnerability class Untrusted Deserialization.