Researchers have built proof-of-concept exploits for an unpatched unserialize vulnerability in Apache Commons Collections, a library used in most Java rollouts. For close to 10 months, a critical ...

Relying on how Java executes user-defined code when unserializing objects, Breen said he could craft custom payloads to give himself shell access on machines running WebLogic, WebSphere, JBoss ...

Java 12's Shenandoah reduces garbage collection pause times because it does the bulk of that work, including compaction, concurrently with the running Java program, according to the OpenJDK website.

Why should you use Collections class methods rather than similarly named fields to obtain empty collections? Type safety makes the crucial difference.

Learn how to fine-tune and parallelize the behavior of Java iterators, using Java 8's forEach() method and Streams API. Then see some performance benchmarks that might surprise you ...