Directory Interface News Today

Jakarta EE Security (formerly JSR 375) introduces the notion of identity stores. Here, learn how they are implemented by Jakarta EE platforms like Payara.

Though there have been fewer than expected publicly reported attacks involving the vulnerability, nearly three-quarters of organizations remain exposed to it.

New report predicts the Log4J risk will continue for years.

Vulnerability will remain a "significant" threat for years to come and highlighted the need for more public and private sector support for open source software ecosystem, Cyber Safety Review Board says.

Log4Shell highlighted weaknesses in the software supply chain, especially when it comes to weaknesses in the security of web applications. This article explores the lessons of Log4Shell and how they can influence security strategies moving forward.

A critical exploit in widespread Java library has been found, disrupting much of the internet as server admins scramble to fix it. The vulnerable component, log4j, is used everywhere as an included library, so you will need to check your servers and make sure they’re updated.

Threat actors are exploiting the vulnerability to drop Web shells and cryptominers, security vendor says.

Why developers may already be at risk, how to detect and mitigate the Log4j vulnerabilities now, and how to improve code security in the future.

Why developers may already be at risk, how to detect and mitigate the Log4j vulnerabilities now, and how to improve code security in the future.

China and Russia, Kinsing miner botnet dominate sources of exploit attempts.