Abstract: Java deserialization vulnerabilities have become a critical security threat, challenging to detect and even harder to exploit due to deserialization's flexible and customizable nature.

A cybercrime group, tracked as Storm-1175, has been actively exploiting a maximum severity GoAnywhere MFT vulnerability in Medusa ransomware attacks for nearly a month. Tracked as CVE-2025-10035, this ...

(RTTNews) - Oracle (ORCL) has released Java 25 - Oracle JDK 25, the latest version of the world's most widely used programming language and development platform. Designed to boost developer ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers exploiting a critical remote code execution flaw in DELMIA Apriso, a manufacturing operations management (MOM) ...

A critical Sitecore zero-day vulnerability is under active exploitation in the latest series of ViewState deserialization attacks this year. The vulnerability, tracked as CVE-2025-53690 and disclosed ...

The Group was chosen to ensure regulatory compliance and end-to-end traceability in the cosmetics supply chain, with scalable management of billions of products, real-time data exchange, and digital ...

source = {StreamRecords$MapBackedRecord@9126} "MapBackedRecord{recordId=1752698244313-0, kvMap={[0]=Hello, [0]._class=java.lang.String, [1]=stream, [1]._class=java ...

SAP has released patches for multiple insecure deserialization vulnerabilities in NetWeaver that could lead to full system compromise. Enterprise software maker SAP on Tuesday announced the release of ...

Rick and Morty Season 8 brought back Space Beth with a new episode giving her the full focus for the first time in a while, and with it also took out the long running threat from the Gromflomites. The ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

The popular Python Pickle serialization format, which is common for distributing AI models, offers ways for attackers to inject malicious code that will be executed on computers when loading models ...