Security on webtechie.be

Is Your Java App Actually Secure, Or Does It Just Look That Way?

Mon, 11 May 2026 00:00:00 +0000

Your Java app passes the build, the tests are green, and the dashboard looks fine. But are the libraries underneath still maintained, or are they quietly collecting vulnerabilities? In this episode we dig into “zombie dependencies”, the CVE process, and the small habits that make a real difference. I host Steve Poole and David Welch from HeroDevs for Foojay Podcast #95.

Foojay Podcast #63: How do we keep our Java applications up to date and secure?

Mon, 16 Dec 2024 00:00:00 +0000

Most teams want to run a current Java version, yet many production systems stay stuck on old releases and outdated dependencies. Management priorities, legacy code, and fear of breaking things all pull in the same direction. In this Foojay Podcast #63, we sit down with Gerrit Grunwald, Jonathan Schneider, Martijn Dashorst, Carl Wanting, Charl Fasching, and Johan Janssen to talk about how we keep Java applications current and secure.

Foojay Podcast #58: How Java Developers Can Secure Their Code

Mon, 30 Sep 2024 00:00:00 +0000

Three years after Log4Shell shook the Java world, the same class of problems keeps showing up in production code. Outdated dependencies, SQL injection, deserialization bugs, and forgotten dead code still bite teams that thought they were safe. In this conversation, we dig into the habits and tools that help developers ship safer Java. I host the episode with Brian Vermeer, and we talk with Jonathan Vila and Erik Costlow in Foojay Podcast #58.

Foojay Podcast #50: JCON Report, Part 2 - Maven, Software Security, Code Quality

Mon, 27 May 2024 00:00:00 +0000

A broken build pipeline or a sneaky transitive dependency can derail a Java project for days. The talks at JCON kept coming back to the same question. How do we keep our code readable, our dependencies safe, and our releases boring? In this second part of our JCON report, we sit down with Karl Heinz Marbaise, Steve Poole, Miro Wengner, Marit van Dijk, and Hinse ter Schuur for Foojay Podcast #50.

Foojay Podcast #7: Security in Java, what do we need to know and how to keep our applications secure?

Mon, 21 Nov 2022 00:00:00 +0000

Every Java application carries a stack of dependencies, and any one of them can hide a vulnerability that puts your users at risk. Knowing how to spot weak spots, harden code, and pick safer libraries matters for anyone shipping JVM software. In this Foojay Podcast #7, host Erik Costlow sits down with Steve Poole, Brian Vermeer, and Anastasiia Voitova to dig into what Java developers need to know to keep applications secure.