Java's New Threat Model - DZone Java
The next positive change in Java security is to strengthen the supply chain of software components, know what’s running and what’s vulnerable, and communicate this information with non-technical experts whose data is at risk.