Java JSON函式庫Fastjson存在重大RCE漏洞，已遭實際利用

Java JSON函式庫Fastjson 1.2.68至1.2.83爆出重大RCE漏洞，且已有實際攻擊，採Spring Boot fat-jar部署並未啟用SafeMode的系統風險最高，官方建議立即開啟安全模式或升級Fastjson 2.x ...
The Hacker News

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Fastjson 1.x flaw CVE-2026-16723 can trigger unauthenticated RCE in Spring Boot fat-JAR apps, with attacks reported and no ...
Компьютерра

GitFlic усиливает DevOps-платформу российским Java-стеком Axiom Spring

GitFlic (ООО «РеСолют», входит в «Группу Астра») и Axiom JDK (АО «Аксиом») подтвердили техническую совместимость ...

Hackers target US firms in FastJson RCE zero-day attacks

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution ...

/proc/self/fd вместо эксплойта. Хакер обманул Java через файловые дескрипторы

Alibaba поставила 9 из 10 и развела руками без фикса. Версия Fastjson 1.2.83 годами считалась последней безопасной точкой для старой ветки библиотеки, но новая уязвимость показала обратное. Ошибка CVE ...

Fastjson Zero-Day Exposes Java Servers To Remote Attacks Arabian Post

Fastjson Zero-Day Exposes Java Servers To Remote Attacks Arabian Post. clearfix>Attackers are exploiting a critical vulnerability in Alibaba's Fastjson library that can allow unauthenticated remote ...

'Expected Rs 25 LPA, got Rs 15 LPA': Techie with 5 years of experience calls job market 'brutal,' sparks debate

A software engineer's Reddit post expressing disappointment over a Rs 15 LPA offer despite having five years of experience ...
Tweakers

java fullstack ontwikkelaar

Maak impact met fullstack skills en blijf jezelf ontwikkelen! Als ervaren Software Engineer (Java) werk je bij ons aan uitdagende projecten die een blijvende impact maken voor onze klanten. Je ontwikk ...
iMasters

Virtual threads no JDK 24: o que mudou para Java em produção

A JEP 491 elimina o pinning de carrier em blocos synchronized, mas o risco em produção se desloca para pools de conexão, ThreadLocal e recursos downstream.

Techie Says ₹15 LPA Offer After 5 Years' Experience Is 'A Shame', Asks 'Is This The Market Now?'

A techie with 5 years of experience sparked debate after revealing that they received a ₹15 LPA offer despite expecting ₹25 ...
Anue Juheng

GCSA洞察：Fastjson 1.2.83 「Gadget-Free」 漏洞（0day）深度分析與防禦指南

在傳統 Java 反序列化漏洞防禦體系中，業界普遍存在以下認知盲區：「AutoType 默認關閉就安全」、「固定了 parseObject 的第二參數（頂層目標類型）就安全」、「排空了本地 Classpath 的反序列化 Gadget ...
Oneindia

Vijay Dachepally Is Building Scalable Cloud Systems While Shaping the Future of Applied AI

Vijay Dachepally, an Amazon SDE II, excels in building scalable cloud systems and pioneering applied AI solutions. Discover his journey from backend engineering to leading projects that automate ...