Security Resources

BYOLM with Spring AI & MCP: Secure, Swappable AI Everywhere

Spring AI and MCP empower BYOLM by enabling swappable language models with privacy, control, and extensibility. Learn more about this approach below.

January 6, 2026

by Soham Sengupta

· 1,564 Views

Securing Verifiable Credentials With DPoP: A Spring Boot Implementation

DPoP binds access tokens to a client's key so even if intercepted, they can't be misused. It's mandatory for EUDI/HAIP 1.0 and supported since Spring Boot 3.5.

January 5, 2026

by Kyriakos Mandalas

CORE

· 4,023 Views · 4 Likes

5 Challenges and Solutions in Mobile App Testing

Common challenges you must overcome during testing include device fragmentation, app security, connectivity issues, and more.

January 2, 2026

by Zac Amos

· 1,455 Views · 1 Like

Security and Governance Patterns for Your Conversational AI

Secure your SOC Copilot by implementing PII redaction, read-only access, and RAG enforcement to prevent data leaks and hallucinations.

December 31, 2025

by Rahul Karne

· 10,211 Views · 1 Like

Avoid BigQuery SQL Injection in Go With saferbq

Learn how saferbq, a Go wrapper, secures Go BigQuery queries by safely handling user-supplied table and dataset names, preventing SQL injection risks.

December 31, 2025

by Maurits Van Der Schee

· 831 Views

DevSecOps as a Strategic Imperative for Modern DevOps

DevSecOps embeds security into every stage of development, reducing risk, accelerating delivery, and strengthening both compliance and customer confidence.

December 31, 2025

by Hleb Skuratau

· 1,597 Views

Why the Future Is Increasingly Pointing Toward Multi-Cloud Strategies

Learn how multi-cloud empowers teams to innovate faster, operate smarter, and mitigate risks through redundancy, flexibility, and best-of-breed services.

December 29, 2025

by Atish Kumar Dash

· 1,104 Views · 1 Like

Shift-Left Strategies for Cloud-Native and Serverless Architectures

A practical guide to effectively embedding policy enforcement, identity management, and automated security controls directly into the development pipeline.

December 26, 2025

by Atish Kumar Dash

· 1,924 Views · 1 Like

The Architect's Guide to Logging

Stop writing useless, expensive log files. Adopt structured logging and centralization to transform your logs from a wall of text into a powerful, secure debugging tool.

December 26, 2025

by Akash Lomas

· 2,431 Views · 2 Likes

Penetration Testing Strategy: How to Make Your Tests Practical, Repeatable, and Risk-Reducing

Learn how to build a repeatable, risk-aligned penetration testing strategy that improves security outcomes, speeds remediation, and supports engineering teams.

December 24, 2025

by Ava Stratton

· 1,350 Views · 1 Like

Blockchain + AI Integration: The Architecture Nobody's Talking About

Blockchain-AI integration demands new architectures: off-chain computation with on-chain verification, solving trust issues in decentralized intelligent systems.

December 23, 2025

by Dinesh Elumalai

CORE

· 3,081 Views · 2 Likes

A Practical Guide to Blocking Cyber Threats

Learn how charities, NGOs, and community organizations can secure data and IT systems with appropriate access controls and minimal cost.

December 23, 2025

by Atish Kumar Dash

· 617 Views

Phantom APIs: The Security Nightmare Hiding in Your AI-Generated Code

Phantom APIs are now emerging through AI-generated code, creating hidden attack surfaces. Learn how they form and how to detect them before attackers do.

December 22, 2025

by Igboanugo David Ugochukwu

CORE

· 2,943 Views · 3 Likes

Defect Report in Software Testing: Best Practices for QA and Developers

In this blog, we will understand what a defect report is, why it is important in software testing, and how to write a clear and effective defect report.

December 22, 2025

by Yogesh Solanki

· 1,009 Views · 1 Like

Fortifying Cloud Security Operations with AI-Driven Threat Detection

Transforming cloud security operations by leveraging predictive and intelligent automation for faster, smarter threat detection and response.

December 19, 2025

by Atish Kumar Dash

· 1,203 Views · 1 Like

Zero Trust Model for Nonprofits: Protecting Mission in the Digital Age

Implement identity-first security to protect donor data, enable volunteers to work safely, and prevent costly cyber incidents.

December 19, 2025

by Atish Kumar Dash

· 1,039 Views · 1 Like

Why Your UEBA Isn't Working (and How to Fix It)

Traditional UEBA can't catch modern threats. Learn how AI-powered behavioral analytics detects sophisticated attacks instantly without months of training.

December 18, 2025

by Alvin Lee

CORE

· 1,088 Views · 1 Like

Agentic AI in Cloud-Native Systems: Security and Architecture Patterns

Agentic AI adds autonomy to cloud-native systems, enabling provisioning and remediation. Learn about risks and patterns to secure safe adoption.

December 18, 2025

by Harvendra Singh

· 1,093 Views · 1 Like

Zero Trust in CI/CD Pipelines: A Practical DevSecOps Implementation Guide

A quick guide to applying Zero Trust in CI/CD by removing static credentials, automating security checks, and enforcing safe deployments into Kubernetes/EKS.

December 12, 2025

by Praveen Chaitanya Jakku

· 3,144 Views · 3 Likes

Secrets in Code: Understanding Secret Detection and Its Blind Spots

Even the best secret scanners miss valid tokens in open-source projects. This research shares data and practical tips for safer API-key design.

December 12, 2025

by Jayson DeLancey

· 2,896 Views · 2 Likes

The Latest Security Topics