Компьютерра

GitFlic усиливает DevOps-платформу российским Java-стеком ...

GitFlic (ООО «РеСолют», входит в «Группу Астра») и Axiom JDK (АО «Аксиом») подтвердили техническую совместимость ...

Java JSON函式庫Fastjson存在重大RCE漏洞，已遭實際利用

Java JSON函式庫Fastjson 1.2.68至1.2.83爆出重大RCE漏洞，且已有實際攻擊，採Spring Boot fat-jar部署並未啟用SafeMode的系統風險最高，官方建議立即開啟安全模式或升級Fastjson 2.x ...
SecurityLab

Usó /proc/self/fd en vez de un exploit: un hacker engañó a Java con descriptores de archivos

Una vulnerabilidad crítica permite ejecutar código incluso con AutoType desactivado. La versión Fastjson 1.2.83 se consideró durante años como el último punto seguro para la rama antigua de la bibliot ...

/proc/self/fd вместо эксплойта. Хакер обманул Java через ...

Alibaba поставила 9 из 10 и развела руками без фикса. Версия Fastjson 1.2.83 годами считалась последней безопасной точкой для старой ветки библиотеки, но новая уязвимость показала обратное. Ошибка CVE ...
IT-Online

Senior Software Developer (Java) | Western Cape

ENVIRONMENT: Our client is a leading South African Fintech company, driving a more inclusive and connected economy for over two decades. Through an extensive nationwide merchant network, they provide ...

Hackers target US firms in FastJson RCE zero-day attacks

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution ...
The Hacker News

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Fastjson 1.x flaw CVE-2026-16723 can trigger unauthenticated RCE in Spring Boot fat-JAR apps, with attacks reported and no ...

Fastjson Zero-Day Exposes Java Servers To Remote Attacks Arabian Post

Fastjson Zero-Day Exposes Java Servers To Remote Attacks Arabian Post. clearfix>Attackers are exploiting a critical vulnerability in Alibaba's Fastjson library that can allow unauthenticated remote ...
Tweakers

java fullstack ontwikkelaar

Maak impact met fullstack skills en blijf jezelf ontwikkelen! Als ervaren Software Engineer (Java) werk je bij ons aan uitdagende projecten die een blijvende impact maken voor onze klanten. Je ontwikk ...
iMasters

Virtual threads no JDK 24: o que mudou para Java em produção

A JEP 491 elimina o pinning de carrier em blocos synchronized, mas o risco em produção se desloca para pools de conexão, ThreadLocal e recursos downstream.

Spring为什么要“抛弃”Feign？

Feign在Spring Cloud生态里统治了将近十年，几乎成了微服务间HTTP调用的代名词。但就在大家以为“声明式HTTP客户端=Feign”的时候，Spring Framework 6悄无声息地推出了一套原生的解决方案——HTTP Interface，核心注解就是@HttpExchange。 前言 最近有个小伙伴跟我吐槽，说他们团队还在用Feign，但Spring官方已经悄悄推出了一个“亲儿 ...
IT-Online

Senior Java Developer

Are you a Senior Java Developer who thrives on building scalable, high-performance enterprise applications?An established organisation within the financial services sector is looking for an ...