The API and Application Protection Blog

ThreatX platform updates, threat research on the latest critical CVEs and 0 days impacting APIs and web applications, alongside strategies and tactics for overcoming the challenges of modern security teams.

Subscribe for updates

Sign up for exclusive threat research, company and content updates, and the occasional fun contest.

  • Blog
  • Application Security
  • Threat Intelligence
  • News
  • Product Updates
  • People & Culture
  • Vulnerabilities
  • Cloud Security
  • API Security
Threat Intelligence BY Andrew Useckas

ThreatX Response to Spring4Shell

On March 29, 2022, Spring disclosed a zero-day vulnerability – Spring4Shell. A widely used Java framework, Spring is found within many web applications. If exploited, this vulnerability could enable unauthenticated remote code execution (RCE) by attackers. This is considered a priority vulnerability that should be addressed immediately in Java applications that leverage Spring Core. Bottom […]

VIEW MORE