JDK 22 adds 10 new root CA certificates, a new asymmetric key interface, and a -XshowSettings option for displaying security settings.

A critical flaw in SAP NetWeaver AS Java is being widely exploited, allowing unauthenticated remote code execution ...

Administrators who support Java applications and various Oracle databases should pay close attention to the latest quarterly security update from Oracle, as more than a third of the security fixes ...

Major cryptography blunder in Java enables “psychic paper” forgeries A failure to sanity check signatures for division-by-zero flaws makes forgeries easy.

The security world held our collective breaths early this week for the big OpenSSL vulnerability announcement. Turns out it’s two separate issues, both related to punycode handling, and they&… ...

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications.