As AI agents move into production environments, security teams are grappling with a new reality: AI risk is no longer confined to what a model generates, instead it now consists of what an autonomous ...

Threat actors are exploiting misconfigured web applications used for security training and internal penetration testing, such as DVWA, OWASP Juice Shop, Hackazon, and bWAPP, to gain access to cloud ...

OpenJDK project teams will focus work on features such as value types, code reflection, AOT compilation, and structured concurrency in the coming year. Oracle’s Java team in 2026 will work toward ...

OWASP just released the Top 10 for Agentic Applications 2026 - the first security framework dedicated to autonomous AI agents. We've been tracking threats in this space for over a year. Two of our ...

XSS remains the top software weakness, followed by SQL injection and CSRF. Buffer overflow issues and improper access control make it to top 25. The MITRE Corporation has released an updated Common ...

An intermittent outage at Cloudflare on Tuesday briefly knocked many of the Internet’s top destinations offline. Some affected Cloudflare customers were able to pivot away from the platform ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

JDK 25 brings powerful new features to Java and JVM developers. Here are seven new or updated features that could convince you to switch. Java continues its fast and feature-packed release schedule, ...

Abstract: Static Application Security Testing (SAST) tools play a critical role in detecting vulnerabilities in mobile apps by analyzing the source code without executing the app. These tools are ...

The OWASP MAS project continues to lead the way in mobile application security. This article describes the resources and tools which have recently been added to OWASP MAS, which provides mobile app ...

Scala applications, while powerful, can expose businesses to major risks if vulnerabilities are ignored. Common issues like insecure serialization, outdated dependencies, and unpatched Akka-based ...