/explore
|
You are here 
|
blog.voltone.net | ||
| | | | |
openssf.org
[AI summary] This article explains how static binary analysis serves as a critical tool for securing software supply chains against threats like the recent 3CX hack. |
|
| | | | | ||
| | | | |
tomrenner.com
Anyone writing code professionally in December 2021 will remember the "fun" of the Log4J vulnerability. For those that weren't - this was a critical security error that allowed attackers to run any code they wanted on your servers. The root cause was a logging library, Log4J, that is used by most projects that are writting in Java. It's usually used to write code something like: log.info("Process completed successfully"); which will then appear in your logs, allowing you to track your application's behaviour. Pretty innocuous stuff. |
|
| | | |||
