Overall trends point to continued risks from vulnerable code The number of Java related patches in the Q2 Oracle Critical Patch Updates (CPU) continues to drift down off the all-time…
Read More
Another Struts flaw and two major breach announcements are reminders of why we need to patch web applications faster Just as I sat down to write this blog –…
Remote Code Execution Vulnerability (CVE-2017-8046) in Pivotal’s Spring Framework Unvalidated user input is the source of most security risks. Using unvalidated user input in an expression language creates a critical…
If you installed the latest Oracle CPU and believe that this alone makes you secure, think again. Without enabling and properly configuring the Serialization Global Filter, flaws may be fully…
What to Expect in 2018’s First Oracle Critical Patch Update Overall trends point to increased risks from vulnerable code After two weeks of focusing on Bond-esque vulnerabilities found in microprocessors,…
