Peaceful Sleeping in the Age of Shells

Explore the landscape of software vulnerabilities and security threats in this informative conference talk from Devoxx. Gain insights into prominent vulnerabilities like Log4Shell and SpringShell, as well as other potentially harmful security issues. Learn where to stay informed about emerging threats and discover tools to enhance the security of your codebase and products. In the first segment, Steve Poole presents data gathered by Sonatype on daily threats and highlights the top vulnerabilities developers should be aware of. The second part, led by Olimpiu Pop, introduces tools for automating the security of source code and supply chains, empowering developers to maintain a more robust defense against potential attacks.