JDK 21 Security Enhancements (seanjmullan.org)

and for those coming from an earlier release, he does one every 6 months: https://seanjmullan.org/blog/