Brian Vermeer

Java Champion | Developer | Speaker

Blogs & Reports


October 2024

🗓️ October 03
🏷️ Foojay
🔗 Foojay Podcast #58: How Java Developers Can Secure Their Code

September 2024

🗓️ September 16
🏷️ Foojay
🔗 The Persistent Threat: Why Major Vulnerabilities Like Log4Shell and ...

August 2024

🗓️ August 27
🏷️ Snyk
🔗 The persistent threat: Why major vulnerabilities like Log4Shell and ...
🗓️ August 11
🏷️ Snyk
🔗 Four easy ways to analyze your Java and Kotlin code for security ...

July 2024

🗓️ July 28
🏷️ Snyk
🔗 Preventing SQL injection in C# with Entity Framework

April 2024

🗓️ April 09
🏷️ Snyk
🔗 Nine Docker pro tips for Node.js developers

February 2024

🗓️ February 06
🏷️ Snyk
🔗 Creating SBOMs with the Snyk CLI
🗓️ February 03
🏷️ Snyk
🔗 10 GitHub Security Best Practices

December 2023

🗓️ December 21
🏷️ Foojay
🔗 Handling security vulnerabilities in Spring Boot
🗓️ December 13
🏷️ Dev
🔗 Mastering Symmetric Encryption in Java: A Practical Guide for Developers

November 2023

🗓️ November 27
🏷️ Snyk
🔗 Handling security vulnerabilities in Spring Boot

October 2023

🗓️ October 17
🏷️ Snyk
🔗 Securing symmetric encryption algorithms in Java

September 2023

🗓️ September 22
🏷️ Dev
🔗 Using JLink to create smaller Docker images for your Spring Boot Java application
🗓️ September 20
🏷️ Foojay
🔗 Using JLink to create smaller Docker images for Spring Boot apps

August 2023

🗓️ August 22
🏷️ Snyk
🔗 Using JLink to create smaller Docker images for your Spring Boot ...

July 2023

🗓️ July 19
🏷️ Foojay
🔗 SnakeYaml 2.0: Solving the unsafe deserialization vulnerability
🗓️ July 18
🏷️ Snyk
🔗 8 tips for securing your CI/CD pipeline with Snyk

June 2023

🗓️ June 19
🏷️ Snyk
🔗 SnakeYaml 2.0: Solving the unsafe deserialization vulnerability
🗓️ June 08
🏷️ Foojay
🔗 Preventing Cross-Site Scripting (XSS) in Java applications with Snyk ...

May 2023

🗓️ May 20
🏷️ Snyk
🔗 How to generate an SBOM for JavaScript and Node.js applications ...

April 2023

🗓️ April 26
🏷️ Dev
🔗 Preventing Cross-Site Scripting (XSS) in Java applications with Snyk Code
🗓️ April 23
🏷️ Snyk
🔗 Preventing Cross-Site Scripting (XSS) in Java applications with Snyk ...
🗓️ April 03
🏷️ Dev
🔗 Data leak in the Netherlands: What developers should learn from this

March 2023

🗓️ March 29
🏷️ Snyk
🔗 Data leak in the Netherlands: What developers should learn from ...
🗓️ March 23
🏷️ Foojay
🔗 Mitigating Path Traversal Vulnerabilities in Java – foojay
🗓️ March 16
🏷️ Foojay
🔗 How to Create SBOMs in Java with Maven and Gradle – foojay
🗓️ March 09
🏷️ Dev
🔗 Mitigating path traversal vulns in Java with Snyk Code
🗓️ March 04
🏷️ Snyk
🔗 Mitigating path traversal vulns in Java with Snyk Code

January 2023

🗓️ January 11
🏷️ Foojay
🔗 Unsafe Deserialization Vulnerability in SnakeYaml | Foojay.io

December 2022

🗓️ December 20
🏷️ Dev
🔗 Exploring the Spring Security authorization bypass (CVE-2022-31692)
🗓️ December 14
🏷️ Snyk
🔗 Exploring the Spring Security authorization bypass (CVE-2022 ...
🗓️ December 14
🏷️ Dev
🔗 Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)
🗓️ December 12
🏷️ Snyk
🔗 Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

November 2022

🗓️ November 20
🏷️ Foojay
🔗 Foojay Podcast #7: Security in Java -- what do we need to know?
🗓️ November 02
🏷️ Foojay
🔗 CVE-2022-42889: Apache Commons Text (Text4Shell) Vulnerability
🗓️ November 01
🏷️ Dev
🔗 How to create SBOMs in Java with Maven and Gradle

October 2022

🗓️ October 30
🏷️ Snyk
🔗 How to create SBOMs in Java with Maven and Gradle
🗓️ October 20
🏷️ Foojay
🔗 How to Use Java DTOs to Stay Secure | Foojay.io Today
🗓️ October 19
🏷️ Dev
🔗 Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text (Text4Shell)
🗓️ October 17
🏷️ Snyk
🔗 Reviewing CVE-2022-42889: The arbitrary code execution ...
🗓️ October 11
🏷️ Dev
🔗 How to use Java DTOs to stay secure
🗓️ October 10
🏷️ Snyk
🔗 How to use Java DTOs to stay secure

September 2022

🗓️ September 14
🏷️ Foojay
🔗 Best Practices for Managing Java Dependencies | Foojay.io Today
🗓️ September 07
🏷️ Foojay
🔗 Controlling your Server with a Reverse Shell Attack | Foojay.io
🗓️ September 02
🏷️ Dev
🔗 Best practices for managing Java dependencies

August 2022

🗓️ August 25
🏷️ Snyk
🔗 Best practices for managing Java dependencies
🗓️ August 23
🏷️ Dev
🔗 What is a reverse shell attack?!
🗓️ August 17
🏷️ Foojay
🔗 Exploring the Apache Commons Configuration RCE Vulnerability
🗓️ August 10
🏷️ Foojay
🔗 Secure CI/CD Pipelines with GitHub Actions for Your Java Apps
🗓️ August 09
🏷️ Snyk
🔗 Controlling your server with a reverse shell attack

July 2022

🗓️ July 14
🏷️ Dev
🔗 User Office Hours: Using the Snyk CLI for Static Code Analysis
🗓️ July 13
🏷️ Foojay
🔗 Deserialization exploits in Java: why should I Care? | Foojay Today
🗓️ July 07
🏷️ Snyk
🔗 Exploring CVE-2022-33980: the Apache Commons configuration ...
🗓️ July 05
🏷️ Dev
🔗 Deserialization exploits in Java: why should I care?

June 2022

🗓️ June 29
🏷️ Dev
🔗 Building a secure CI/CD pipeline with GitHub Actions
🗓️ June 26
🏷️ Snyk
🔗 Building a secure CI/CD pipeline with GitHub Actions for your Java ...
🗓️ June 24
🏷️ Dev
🔗 User Office Hours: Building secure application in VS Code with Snyk

May 2022

🗓️ May 11
🏷️ Foojay
🔗 How to do password hashing in Java applications the right way ...
🗓️ May 03
🏷️ Snyk
🔗 3 Jedi-inspired lessons to level up your JavaScript security

April 2022

🗓️ April 07
🏷️ Foojay
🔗 Spring4Shell: The zero-day RCE in the Spring Framework explained
🗓️ April 07
🏷️ Snyk
🔗 Spring4Shell extends to Glassfish and Payara: same vulnerability ...

March 2022

🗓️ March 30
🏷️ Snyk
🔗 Spring4Shell: The zero-day RCE in the Spring Framework explained ...
🗓️ March 24
🏷️ Dev
🔗 User Office Hours: Building a Secure CI/CD Pipeline with GitHub Actions and Snyk
🗓️ March 23
🏷️ Snyk
🔗 How to do password hashing in Java applications the right way!
🗓️ March 16
🏷️ Foojay
🔗 Security Warning: Your Java Attack Surface Just Got Bigger | Foojay.io

February 2022

🗓️ February 21
🏷️ Dev
🔗 User Office Hours: Introduction to Snyk Code
🗓️ February 20
🏷️ Snyk
🔗 Join The Big Fix: a 24-hour livestream dedicated to fixing security ...
🗓️ February 18
🏷️ Dev
🔗 Win free swag by fixing security vulnerabilities
🗓️ February 08
🏷️ Snyk
🔗 Join "The Big Fix" to secure your projects with Snyk and earn cool ...

January 2022

🗓️ January 11
🏷️ Snyk
🔗 New years resolution: Don't show my security tokens when hacking ...
🗓️ January 04
🏷️ Dev
🔗 Java JSON deserialization problems with the Jackson ObjectMapper

December 2021

🗓️ December 12
🏷️ Foojay
🔗 Log4Shell: Critical Log4j RCE Vulnerabilty – Update to Version 2.15 ...
🗓️ December 09
🏷️ Snyk
🔗 Log4j vulnerability explained: Prevent Log4Shell RCE by updating ...
🗓️ December 01
🏷️ Foojay
🔗 New Java 17 Features for Improved Security and Serialization – foojay

November 2021

🗓️ November 30
🏷️ Snyk
🔗 Java JSON deserialization problems with the Jackson ObjectMapper ...
🗓️ November 23
🏷️ Dev
🔗 New Java 17 features for improved security and serialization
🗓️ November 15
🏷️ Snyk
🔗 Proactively fixing vulnerabilities to maintain Java security and ...
🗓️ November 10
🏷️ Snyk
🔗 Best practices for containerizing Python applications with Docker ...

October 2021

🗓️ October 24
🏷️ Foojay
🔗 Discussion: The State of Java 2021 | Foojay.io Today
🗓️ October 23
🏷️ Snyk
🔗 Security Horror Story: Accidentally exposing PII data
🗓️ October 20
🏷️ Snyk
🔗 New Java 17 features for improved security and serialization

August 2021

🗓️ August 25
🏷️ Snyk
🔗 The 8 best IntelliJ plugins for improving your coding experience
🗓️ August 24
🏷️ Computable
🔗 Security in geding bij infrastructure-as-code
🗓️ August 17
🏷️ Snyk
🔗 How Snyk Social Trends help you fix essential security vulnerabilities
🗓️ August 10
🏷️ Foojay
🔗 Why You Should Upgrade to Maven Version 3.8.1 Today or Very Soon
🗓️ August 02
🏷️ Snyk
🔗 Brian Vermeer named one of Business Insider's "21 Top Developers ...

July 2021

🗓️ July 28
🏷️ Foojay
🔗 Getting Started with Snyk for Secure Java Development | Foojay Today
🗓️ July 18
🏷️ Snyk
🔗 Why you should upgrade to Maven version 3.8.1
🗓️ July 14
🏷️ Snyk
🔗 Devoxx4Kids: Empowering young Java developers and creating ...

June 2021

🗓️ June 22
🏷️ Snyk
🔗 Getting started with Snyk for secure Java development
🗓️ June 21
🏷️ Dev
🔗 JVM Ecosystem Report 2021
🗓️ June 17
🏷️ Foojay
🔗 New JVM Ecosystem Report 2021 Has Arrived! – foojay
🗓️ June 17
🏷️ Snyk
🔗 JVM Ecosystem report 2021
🗓️ June 09
🏷️ Foojay
🔗 Learn All About Java Encryption and Hashing | foojay

May 2021

🗓️ May 12
🏷️ Foojay
🔗 Sanitize All Input! Sanitize All Input! Sanitize All Input! | foojay
🗓️ May 11
🏷️ Computable
🔗 Zo leg je fundament van productieve devsecops-cultuur
🗓️ May 05
🏷️ Foojay
🔗 Preventing YAML Parsing Vulnerabilities in Java | foojay

April 2021

🗓️ April 28
🏷️ Foojay
🔗 Fix Java Security Issues While Coding in IntelliJ IDEA | foojay
🗓️ April 19
🏷️ Snyk
🔗 Snyk Maven plugin: Integrated security vulnerability scanning for ...
🗓️ April 14
🏷️ Foojay
🔗 8 Best Practices to Prevent SQL Injection Attacks | foojay
🗓️ April 08
🏷️ Dev
🔗 Preventing YAML parsing issues in Java
🗓️ April 07
🏷️ Snyk
🔗 How to fix Java security issues while coding in IntelliJ IDEA | Snyk
🗓️ April 07
🏷️ Snyk
🔗 How to fix Java security issues while coding in IntelliJ IDEA
🗓️ April 06
🏷️ Dev
🔗 SQL injection cheat sheet

March 2021

🗓️ March 31
🏷️ Foojay
🔗 Participate in the Java Ecosystem Survey 2021 | foojay
🗓️ March 29
🏷️ Snyk
🔗 Preventing YAML parsing vulnerabilities with snakeyaml in Java
🗓️ March 29
🏷️ Snyk
🔗 Preventing YAML parsing vulnerabilities with snakeyaml in Java | Snyk
🗓️ March 25
🏷️ Snyk
🔗 SQL injection cheat sheet: 8 best practices to prevent SQL injection ...
🗓️ March 14
🏷️ Snyk
🔗 Solving Java security issues in a Spring MVC app
🗓️ March 14
🏷️ Snyk
🔗 Solving Java security issues in a Spring MVC app | Snyk
🗓️ March 10
🏷️ Foojay
🔗 Secure Code Review Best Practices (Part 1) | foojay

February 2021

🗓️ February 25
🏷️ Snyk
🔗 Java configuration: prevent Java Misconfiguration Blog
🗓️ February 19
🏷️ Dev
🔗 Java ecosystem survey 2021: We need your input
🗓️ February 17
🏷️ Snyk
🔗 10 best practices to build Java containers with Docker | Snyk Blog
🗓️ February 17
🏷️ Snyk
🔗 10 best practices to build Java containers with Docker Blog ...
🗓️ February 14
🏷️ Snyk
🔗 Java ecosystem survey 2021 Blog
🗓️ February 14
🏷️ Snyk
🔗 Java ecosystem survey 2021 | Snyk Blog

January 2021

🗓️ January 27
🏷️ Snyk
🔗 Identify, prioritize, and fix vulnerabilities with Reachable ...
🗓️ January 27
🏷️ Foojay
🔗 Explaining Java Deserialization Vulnerabilities (Part 2) | foojay
🗓️ January 20
🏷️ Foojay
🔗 Explaining Java Deserialization Vulnerabilities (Part 1) | foojay
🗓️ January 13
🏷️ Foojay
🔗 Hacking Java XML Input via External Entity Injection | foojay
🗓️ January 12
🏷️ Dev
🔗 Java XML External Entity Injection - Explained and Solved

December 2020

🗓️ December 24
🏷️ Foojay
🔗 5 Tips to Create Secure Docker Images for Java Applications | foojay
🗓️ December 23
🏷️ Dev
🔗 Git checkout remote branch: how it works and when to use it
🗓️ December 17
🏷️ Snyk
🔗 Serialization and deserialization in Java Blog
🗓️ December 17
🏷️ Snyk
🔗 Serialization and deserialization in Java | Snyk Blog
🗓️ December 14
🏷️ Snyk
🔗 Git checkout remote branch: how it works and when to use | Snyk Blog
🗓️ December 14
🏷️ Snyk
🔗 Git checkout remote branch: how it works and when to use Blog
🗓️ December 07
🏷️ Foojay
🔗 Minimizing Security Risks in Application Development | foojay
🗓️ December 04
🏷️ Dev
🔗 [Podcast] Barcoding podcast - Episode 13: Security

November 2020

🗓️ November 25
🏷️ Snyk
🔗 Snyk CLI cheatsheet | Snyk
🗓️ November 25
🏷️ Snyk
🔗 Snyk CLI cheat sheet
🗓️ November 22
🏷️ Foojay
🔗 Use Query Parameterization to Prevent Injection – foojay
🗓️ November 19
🏷️ Snyk
🔗 Docker for Java developers: 5 things you need to know not to fail ...
🗓️ November 10
🏷️ Snyk
🔗 Java logging: what should you log and what not?
🗓️ November 10
🏷️ Snyk
🔗 Java logging: what should you log and what not? | Snyk
🗓️ November 05
🏷️ Dev
🔗 [Video] Security scanning within Gradle

October 2020

🗓️ October 29
🏷️ Dev
🔗 JHipster security scanning
🗓️ October 22
🏷️ Snyk
🔗 Gradle dependencies: scanning with new Snyk Gradle plugin | Snyk
🗓️ October 22
🏷️ Snyk
🔗 Gradle dependencies: scanning with new Snyk Gradle plugin
🗓️ October 07
🏷️ Snyk
🔗 JHipster security scanning with Snyk | Snyk
🗓️ October 07
🏷️ Snyk
🔗 JHipster security scanning with Snyk

September 2020

🗓️ September 29
🏷️ Dev
🔗 Fixing vulnerabilities in Maven projects
🗓️ September 18
🏷️ Dev
🔗 Java 25 years — aging like fine wine or more like milk?
🗓️ September 13
🏷️ Snyk
🔗 Fixing vulnerabilities in Maven projects | Snyk
🗓️ September 13
🏷️ Snyk
🔗 Fixing vulnerabilities in Maven projects
🗓️ September 11
🏷️ Dev
🔗 Exception Handling in Java Streams
🗓️ September 02
🏷️ Dev
🔗 5 tips to improve your Docker security

August 2020

🗓️ August 24
🏷️ Dev
🔗 How 4 lines of Java code end up in 518772 lines in production.
🗓️ August 18
🏷️ Dev
🔗 Secure code review: Bonus - Who reviews the code?
🗓️ August 17
🏷️ Dev
🔗 Secure code review: Part 8 - Statically testing
🗓️ August 16
🏷️ Dev
🔗 Secure code review: Part 7 - Well-known attacks
🗓️ August 15
🏷️ Dev
🔗 Secure code review: Part 6 - Handling sensitive data
🗓️ August 14
🏷️ Dev
🔗 Secure code review: Part 5 - Least privilege principle
🗓️ August 13
🏷️ Dev
🔗 Secure code review: Part 4 - Enforce secure authentication
🗓️ August 12
🏷️ Dev
🔗 Secure code review: Part 3 - Test for vulnerabilities introduced by dependencies
🗓️ August 11
🏷️ Dev
🔗 Secure code review: Part 2 - Never store secrets as code
🗓️ August 11
🏷️ Snyk
🔗 Java dependency management: how many lines of code does my ...
🗓️ August 11
🏷️ Dev
🔗 How is your sticker game in 2020 💻
🗓️ August 10
🏷️ Dev
🔗 Secure code review: Part 1 - Sanitize and validate all input
🗓️ August 10
🏷️ Dev
🔗 📣 [Feedback asked] Calling all JS developers using VS Code
🗓️ August 05
🏷️ Dev
🔗 Eclipse Collections now supports Triples
🗓️ August 03
🏷️ Snyk
🔗 Security Badge - Instant Security Information

July 2020

🗓️ July 24
🏷️ Dev
🔗 Live Vulnerability spotting in VSCode
🗓️ July 23
🏷️ Dev
🔗 Live Exploiting Your Open Source Dependencies with Brian Vermeer

June 2020

🗓️ June 07
🏷️ Snyk
🔗 Discover package vulnerabilities with the Snyk integration for JSDelivr

May 2020

🗓️ May 21
🏷️ Snyk
🔗 Sum List of numbers in Java | Snyk
🗓️ May 21
🏷️ Snyk
🔗 Java turns 25—aging like fine wine or more like milk?
🗓️ May 21
🏷️ Snyk
🔗 Sum List of numbers in Java
🗓️ May 21
🏷️ Snyk
🔗 Java turns 25—aging like fine wine or more like milk? | Snyk
🗓️ May 08
🏷️ Dev
🔗 Summing a List of numbers in Java

April 2020

🗓️ April 19
🏷️ Snyk
🔗 Secure Code Review | Snyk
🗓️ April 19
🏷️ Snyk
🔗 Secure Code Review
🗓️ April 07
🏷️ Dev
🔗 Effortlessly finding vulnerabilities in npm packages with VS Code
🗓️ April 02
🏷️ Dev
🔗 Challenge
🗓️ April 01
🏷️ Snyk
🔗 Vuln Cost: Effortless finding vulnerabilities in npm packages with VS ...

March 2020

🗓️ March 30
🏷️ Snyk
🔗 Vulnerable Gradle plugin-publish plugin reveals sensitive ...
🗓️ March 25
🏷️ Snyk
🔗 Open Source Vulnerability Scanner | Snyk
🗓️ March 16
🏷️ Dev
🔗 The perils of configuration security

February 2020

🗓️ February 27
🏷️ Dev
🔗 Kotlin becomes the 2nd most popular language on the JVM
🗓️ February 26
🏷️ Dev
🔗 Web Application Firewall - Friend of your DevOps pipeline?
🗓️ February 26
🏷️ Dev
🔗 How to implement DevSecOps across the entire organisation
🗓️ February 24
🏷️ Snyk
🔗 Ghostcat breach affects all Tomcat versions | Snyk
🗓️ February 24
🏷️ Snyk
🔗 Ghostcat breach affects all Tomcat versions
🗓️ February 12
🏷️ Dev
🔗 What are your favorite Software Development tools ?
🗓️ February 04
🏷️ Snyk
🔗 Spring dominates the Java ecosystem with 60% using it for their ...
🗓️ February 04
🏷️ Snyk
🔗 Kotlin overtakes Scala and Clojure, becoming the 2nd most popular ...
🗓️ February 04
🏷️ Snyk
🔗 JVM Ecosystem Report 2020 | Snyk
🗓️ February 04
🏷️ Snyk
🔗 IntelliJ IDEA dominates the IDE market with 62% adoption among ...
🗓️ February 04
🏷️ Snyk
🔗 Kotlin overtakes Scala and Clojure, to become the 2nd most popular ...
🗓️ February 04
🏷️ Snyk
🔗 JVM Ecosystem Report 2020
🗓️ February 04
🏷️ Snyk
🔗 64% of developers report that Java 8 remains the most often used ...
🗓️ February 04
🏷️ Snyk
🔗 36% of developers switched from Oracle JDK to an alternate ...

January 2020

🗓️ January 21
🏷️ Snyk
🔗 The cost of a security breach
🗓️ January 21
🏷️ Snyk
🔗 The cost of a security breach | Snyk

December 2019

🗓️ December 24
🏷️ Dev
🔗 Use strong encryption and hashing algorithms in Java
🗓️ December 14
🏷️ Dev
🔗 Avoid Java serialization
🗓️ December 12
🏷️ Dev
🔗 Configure your Java XML-parsers to prevent XXE

September 2019

🗓️ September 21
🏷️ Dev
🔗 10 Java security best practices
🗓️ September 15
🏷️ Snyk
🔗 10 Java security best practices | Snyk
🗓️ September 15
🏷️ Snyk
🔗 10 Java security best practices

August 2019

🗓️ August 26
🏷️ Dev
🔗 Jackson Deserialization Vulnerability
🗓️ August 20
🏷️ Snyk
🔗 Jackson Deserialization Vulnerability | Snyk
🗓️ August 20
🏷️ Snyk
🔗 Jackson Deserialization Vulnerability
🗓️ August 19
🏷️ Dev
🔗 Optional .... what else?
🗓️ August 16
🏷️ Dev
🔗 10 Eclipse plugins you shouldn’t code without
🗓️ August 14
🏷️ Snyk
🔗 10 Eclipse plugins you shouldn't code without
🗓️ August 14
🏷️ Snyk
🔗 10 Eclipse plugins you shouldn't code without | Snyk

July 2019

🗓️ July 24
🏷️ Snyk
🔗 Fix open source vulnerabilities directly from your Eclipse IDE | Snyk
🗓️ July 24
🏷️ Snyk
🔗 Fix open source vulnerabilities directly from your Eclipse IDE

April 2019

🗓️ April 16
🏷️ Snyk
🔗 Take actions to improve security in your Docker images | Snyk
🗓️ April 16
🏷️ Snyk
🔗 Shifting Docker security left
🗓️ April 16
🏷️ Snyk
🔗 80% of developers are not addressing Docker security
🗓️ April 16
🏷️ Snyk
🔗 The top two most popular Docker base images each have over 500 ...
🗓️ April 16
🏷️ Snyk
🔗 Take actions to improve security in your Docker images
🗓️ April 16
🏷️ Snyk
🔗 Shifting Docker security left | Snyk
🗓️ April 16
🏷️ Snyk
🔗 80% of developers are not addressing Docker security | Snyk

March 2019

🗓️ March 22
🏷️ JetBrains
🔗 Catching Vulnerabilities Instantly in Your IntelliJ IDEA Environment

January 2018

🗓️ January 03
🏷️ DZone
🔗 Optional... What Else?
🗓️ January 03
🏷️ DZone
🔗 Exception Handling in Java Streams