6: JSM policy not respected by deployed applications

It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to...

Window Snyder

Window occupies an entirely unique place in the security community. Sure, being a woman in the security community is rare enough. But she also commands a lot of respect in this ultra-competitive world, having helped develop Microsoft’s threat modeling process, worked as a security architect at...