Blog Archiv

Open-Source-Sicherheit

Preventing YAML parsing vulnerabilities with snakeyaml in Java

30. März 2021

Code-Sicherheit

SQL injection cheat sheet: 8 best practices to prevent SQL injection attacks

26. März 2021

Code-Sicherheit

Solving Java security issues in my Spring MVC application

15. März 2021

Open-Source-Sicherheit

Security im Kontext moderner Software-Lieferketten

1. März 2021

Code-Sicherheit

Java configuration: how to prevent security misconfigurations

26. Februar 2021

Open-Source-Sicherheit

How to choose a Software Composition Analysis (SCA) tool

22. Februar 2021

Code-Sicherheit

Go security cheatsheet: 8 security best practices for Go developers

9. Februar 2021

Open-Source-Sicherheit

The State of Cloud Native Application Security survey—2021

2. Februar 2021

Open-Source-Sicherheit

Identify, prioritize, and fix vulnerabilities with Reachable Vulnerabilities for GitHub

28. Januar 2021

Schwachstellen-Insights

What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm

12. Januar 2021

Open-Source-Sicherheit

Blazing the trail for cloud native application security

21. Dezember 2020

Open-Source-Sicherheit

Serialization and deserialization in Java: explaining the Java deserialize vulnerability

18. Dezember 2020

Anwendungssicherheit

Security concerns of third-party JavaScript scripts

17. Dezember 2020

Open-Source-Sicherheit

Snyk CLI-Cheatsheet

26. November 2020

Schwachstellen-Insights

Command injection: how it works, what are the risks, and how to prevent it

25. November 2020

DevSecOps

DevSecOps tools for open source projects in JavaScript and Node.js

24. November 2020

Open-Source-Sicherheit

Docker for Java developers: 5 things you need to know not to fail your security

20. November 2020

Code-Sicherheit

Java logging: what should you log and what not?

11. November 2020

DevSecOps

GitHub Actions to securely publish npm packages

10. November 2020

Open-Source-Sicherheit

Enterprise security best practices for managing vulnerabilities at scale

9. November 2020

Open-Source-Sicherheit

Developing secure software: how to implement the OWASP top 10 Proactive Controls

5. November 2020