NASA scientists today announced they are releasing free software that will find ‘bugs,’ or defects, in Java computer code. The new software, Java Pathfinder, is classified as ‘open source software.’ ...
Amazon Web Services (AWS) has updated the 'detectors' in its CodeGuru Reviewer tool to seek out log injection flaws like the recently disclosed Log4Shell bug in the popular Java logging library Log4J.
There are 17,000 unpatched Log4j packages in the Maven Central ecosystem, leaving massive supply-chain risk on the table from Log4Shell exploits. There’s an enormous amount of software vulnerable to ...