#java
-
Malicious Spreadsheets Run Code in LibreOffice and OpenOffice Without Macro Warnings
Researchers have shown that a specially crafted Calc document executes an attacker's code the moment it is opened — with none of the trust prompt both suites normally display before running a macro.
-
Why 0xCAFEBABE: the story behind Java's class-file magic number
Every Java class file begins with the four bytes 0xCAFEBABE. In 1996 programmer Bill Venners wondered where the value came from — and got an answer from one of the language's creators.
-
Java 27 Is Out: Post-Quantum TLS and G1 by Default
OpenJDK 27 reached General Availability on September 15, 2026. The release is the reference implementation of the Java SE 27 platform and brings nine new features — ranging from finalized mechanisms to previews and incubators.
-
Oracle Bans AI Code in OpenJDK — but Not in Its Own Products
The OpenJDK project, stewarded by Oracle, has refused to accept neural-network-generated code, even as Larry Ellison insists that Oracle's own code is now written by artificial intelligence.
-
Hackers Hid the khunt Toolkit Inside an Oracle Database
Through an SQL injection, attackers planted a post-exploitation kit directly inside an Oracle database, compiling it as a Java object. The technique, according to Huntress, is spotted extremely rarely in real-world attacks.
-
RCE Vulnerability Found in Fastjson 1.x — Attacks Already Underway, No Patch Available
A critical flaw in Alibaba's JSON library allows unauthenticated code execution in Spring Boot applications. As of July 25, no fixed version of Fastjson 1.x exists.