The BellSoft Blog

All about Java development, tools, management, resources, and costs. New articles weekly.

Native ImagesBellSoft productsReleaseDevelopmentSecurity
figure
Posts

BellSoft Releases Hardened Builder for Paketo Buildpacks

Aleksei Voitylov

14

Posts
What Are Hardened Container Images? Benefits, Security, and Adoption
card image

Catherine Edelveis

23

Learn what hardened container images are, how they reduce attack surface and CVE noise, and how to adopt them in production.

Posts
A Guide to Java Application Security
card image

Dmitry Chuyko

14

Explore proven Java app security best practices, inluding safer deserialization, input validation, strong crypto, quarterly JDK patches, hardened containers, and SBOMs.

Posts
Docker Image Security: Best Practices for Production
card image

Catherine Edelveis

22

Learn how to secure Docker container images: minimal base images, non-root containers, SBOM, provenance attestation, and host hardening. Get practical tips.

Announcements
Liberica Native Image Kit 25.0.0+1 is Available
card image

Aleksei Voitylov

5

New Liberica NIK version 25.0.0+1 includes several important fixes in the JDK.

Posts
How to Perform Technology Risk Assessment at Small and Medium-sized Companies
card image

Vladimir Ivanov

18

Find out how to perform Technology Risk Assessment depending on the company size.

Posts
How to Generate an SBOM for Java: A Comprehensive Guide
card image

Dmitry Chuyko

20

Find out how to create an SBOM using open-source tools

Posts
What are zero-day vulnerabilities and how to minimize zero-day attacks
card image

Catherine Edelveis

12

Find out about zero-day vulnerabilities and ways to protect your application from zero-day attacks.

Posts
CVE-2024-3094: a backdoor in XZ Utils
card image

Sergey Chernyshev

5

Find out about a recently discovered CVE in XZ Utils and ways to mitigate the risks.

Shorts
CVE-2023-4911 (Looney Tunables): a critical vulnerability in glibc
card image

Dmitry Chuyko

2

Find out about a vulnerability in GNU C Library (glibc)

Posts
Top-9 cybersecurity threats in 2023
card image

Sergey Chernyshev

16

Find out about top cybersecurity risks and mitigation techniques

Posts
An overview of SLSA for software supply chain security
card image

Aleksei Voitylov

8

Discover SLSA, representing innovative practices for cybersecurity fortification.

Posts
U.S. and EU regulations are demanding a software bill of materials (SBOM)
card image

Aleksei Voitylov

13

Find out about U.S. and EU regulations demanding a software bill of materials

Posts
What is a software bill of materials (SBOM)
card image

Aleksei Voitylov

14

Find out how SBOMs help to secure a software supply chain and what information they must contain

Posts
Distroless containers for security and size?
card image

Dmitry Chuyko

16

Discover the true value of distroless container images: their size, security, and practical use cases. Learn how they compare to Alpaquita Linux and other alternatives

Shorts
Critical vulnerabilities in OpenSSL 3.0
card image

Sergey Chernyshev

4

Find out about the newest CVEs discovered in OpenSSL 3.0 and how to eliminate the risk of exploits

Shorts
CVE-2022-42889: a critical vulnerability in Apache Commons Text library
card image

Sergey Chernyshev

3

Find out about a CVE-2022-42889 vulnerability in a popular Java library

Posts
Enhance Linux security on server and cloud
card image

Dmitry Chuyko

16

Discover methods of increasing the security of Linux-based servers and cloud-native apps.

Posts
Linux Server and Linux Cloud support is a must and here is why
card image

Dmitry Chuyko

10

Find out why you shouldn’t neglect the support of your Linux distro for server or cloud

Posts
Vulnerability scanning for Java apps
card image

Sergey Chernyshev

14

Vulnerability scanners are useful tools when it comes to monitoring and eliminating security gaps at all production stages.

Posts
Liberica JDK 17 LTS release: solid ground for an update
card image

Aleksei Voitylov

15

Liberica JDK 17 is the new LTS Java build, full of security updates, convenient features, and modern additions. Find out how to upgrade from JDK 8 and 11!

Posts
End of life for old TLS in OpenJDK and Liberica JDK
card image

Sergey Chernyshev

13

TLS 1.0 and TLS 1.1 are exploitable, so we deprecated them in Liberica JDK. Learn about the security vulnerabilities and solutions.

Subcribe to our newsletter

figure

Read the industry news, receive solutions to your problems, and find the ways to save money.

1