Spring4Shell vulnerability could have ‘a larger impact’ than Log4j

A newly-discovered zero-day vulnerability known as Spring4Shell could have “a larger impact” than Log4j.

Log4j made waves in recent months as the vulnerability in the popular open-source logging library enabled attackers to break into systems, steal passwords and logins, extract data, and infect networks with malicious software.

However, attention is now shifting to the Spring4Shell exploit.

Spring4Shell is a zero-day remote code execution (RCE)...

2022 Java Developer Productivity Report: Teams aren’t realising the promise of microservices

The latest edition of Perforce’s annual Java Developer Productivity Report highlights that teams aren’t realising the full promise of microservices and CI/CD.

Developers are often finding that microservices and CI/CD are decreasing their productivity rather than improving. 

Among CI/CD users, 42 percent of respondents report build completion times of over five minutes. The most common (33%) response was build times exceeding 10 minutes.

The highest...

Microsoft announces its own LTS build of OpenJDK

Microsoft has announced the preview of its own build of OpenJDK, a free and open-source implementation of the Java SE platform.

The Microsoft Build of OpenJDK is a long-term support (LTS) distribution that includes binaries for Java 11, based on OpenJDK 11.0.10+9, on x64 server and desktop environments on macOS, Linux, and Windows.

In a blog post, Microsoft wrote:

“Microsoft deploys over 500,000 Java Virtual Machines (JVMs) internally – excluding all Azure...

O’Reilly: Python leads languages, React for web development, and ML/AI interest grows

Education giant O’Reilly has released data about its online platform which highlights some interesting software development trends.

The headline finding is that Python continues to be the programming language with the most interest.

Given the growth in topics relating to Python such as AI – and the language often considered the best to pick up for new developers – it’ll perhaps come of little surprise to hear of its popularity.

O’Reilly highlights...

TIOBE Index: Python slithers ahead of Java for the first time

The latest edition of the TIOBE Index has been released and highlights Python’s continued growth in popularity.

Here are the top 10 most popular languages according to TIOBE’s November 2020 index:

The most notable change in the top 10 is that exchange of places between Java and Python.

Python was created by Guido van Rossum and first released in 1991. The language has gained popularity in recent years due to its reputation of being relatively simple to...

Python holds its ground as Java slides in Redmonk’s language rankings

Programming language Python has had a good week, but the same can't be said for Java.

In language rankings this month released by IEEE, Python ranked number one with a comfortable lead ahead of Java. It's similar news in Redmonk's rankings this week.

Redmonk's biannual rankings measures GitHub pull requests and Stack Overflow queries over a period of six months to get an idea of the popularity of various programming languages.

JavaScript remains in top place...

IEEE Spectrum: Python is the top programming language of 2020

The latest IEEE Spectrum shows Python retaining its lead to be the top programming language of 2020.

First created 30 years ago in 1990, Python's popularity has surged in recent years thanks to it being ideally suited for artificial intelligence and web development. Many schools also teach Python because it's considered a relatively easy language for beginners.

IEEE's rankings are interactive to take into account the unique needs and interests of each programmer. On...

GitHub warns Java developers about malware infecting NetBeans projects

GitHub has issued a warning to Java developers about malware which is specifically infecting NetBeans projects.

The security team for the world’s largest repository host has dubbed the malware Octopus Scanner and found “26 open source projects that were backdoored by this malware and that were actively serving backdoored code.”

GitHub notes the malware is designed to backdoor projects created using the Apache NetBeans IDE – a phenomenon they had not seen before...