Gregor Samsa: Exploiting Java’s XML Signature Verification
By Felix Wilhelm, Project Zero Earlier this year, I discovered a surprising attack surface hidden deep inside Java’s standard library: A cus... (more…)
Read more »
Java 9 will be upon us soon (currently scheduled for July 2017), and while it doesn’t include as many API changes as Java 8, it does include quite a few impl… Read more