Security Resources

Set Up OpenID Connect With Keycloak: A Step-by-Step Guide

This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak with key concepts and prerequisites.

July 31, 2025

by Gunter Rotsaert

CORE

· 2,608 Views · 2 Likes

Bring Your Own Feed (BYOF): An Engineer's Guide to Effective Threat Intelligence

Let’s look at threat intelligence, what it is, why it’s important, and how to “BYOF” — bring your own custom threat intelligence feeds.

July 30, 2025

by John Vester

CORE

· 2,413 Views · 2 Likes

The Developer's Guide to Cloud Security Career Opportunities

The question isn't whether you should consider cloud security — it's how quickly you can position yourself to take advantage of the opportunities.

July 30, 2025

by Philip Piletic

CORE

· 2,468 Views · 2 Likes

Federated Identity: The Modern Approach to Cloud Security and Automation

Long-lived cloud credentials are risky. Federated identity lets workloads use short-lived tokens from a trusted IdP, improving security without storing secrets.

July 29, 2025

by Pradeep Kumar Goud Gaddamidi

· 2,629 Views

Building Secure Transaction APIs for Modern Fintech Systems Using GitHub Copilot

Use GitHub Copilot to build secure fintech APIs faster by adding input validation, rate limiting, and safe error handling, without compromising compliance or trust.

July 29, 2025

by Sibasis Padhi

· 2,882 Views · 3 Likes

Why Most IaC Strategies Still Fail (And How to Fix Them)

Infrastructure as Code offers a compelling vision for solving the chaos of cloud ops, but in practice, many organizations remain tangled in complexity.

July 29, 2025

by Ido Neeman

· 2,091 Views

Implementing Secure Multi-Tenancy in SaaS Applications: A Developer's Checklist

A Practical checklist and technical insights for securely implementing multi-tenancy in SaaS applications. Strategies for data isolation and robust authentication

July 28, 2025

by Shubham Joshi

· 4,929 Views · 2 Likes

Unity Catalog + AI: How Databricks Is Making Data Governance AI-Native in 2025

Data governance from a restrictive practice to an enabling force, facilitating intelligent, secure, and agile data management within enterprises.

July 25, 2025

by Sairamakrishna BuchiReddy Karri

· 3,562 Views · 1 Like

Secure Microservices in Java: Cloud-Native Design With Zero Trust Architecture

Java-based microservices power scalable, cloud-native applications. Address its rising security risks by adopting Zero Trust Architecture.

July 24, 2025

by Venkateswara Gogineni

· 2,807 Views · 1 Like

Why Data Privacy Without Context Will No Longer Work in 2026

Traditional anonymization is no longer enough. Learn why enterprises now need context-aware, entity-level privacy to stay compliant and operational.

July 24, 2025

by Mouli Srini

· 2,115 Views · 3 Likes

Building a Modern Data Platform That Delivers Real Business Value

Data modernization transforms how organizations manage and use data by aligning cloud-native tech, governance, and culture to drive value and agility.

July 23, 2025

by Amlan Patnaik

· 2,319 Views · 2 Likes

Implementing Least Privilege in AWS IAM: Principles, Practices, and Automation

Applying least privilege in AWS IAM helps reduce risk, improve compliance, and secure environments by granting only necessary permissions to users and services.

July 22, 2025

by Ishwar Bansal

· 4,107 Views · 2 Likes

Lock-Free Programming: From Primitives to Working Structures

Locking is not the only way to deal with concurrency. Lock-free programming approaches are on the opposite side. Let's dive into them.

July 22, 2025

by Bartłomiej Żyliński

CORE

· 4,690 Views · 7 Likes

Software Supply Chain Security Regulations From a DevSecOps Perspective

This article examines how new regulations demand automated SBOMs and DevSecOps automation to secure software supply chains and ensure compliance.

July 21, 2025

by Apostolos Giannakidis

CORE

· 3,527 Views · 1 Like

How to Expose IBM FS Cloud Container App to Public

This white paper provides a solution faced by the IBM Cloud Financial Services Cloud users when exposing application to public network.

July 18, 2025

by Pari Biswas

· 3,765 Views · 1 Like

AI-Driven Threat Hunting: Catching Zero Day Exploits Before They Strike

Zero-day exploits hide in plain sight. Learn how AI detects them, see real-world use cases, and build your own Python threat hunter to catch anomalies fast.

July 18, 2025

by Dinesh B

· 3,525 Views · 1 Like

Burn that List: Smarter Use of Allowlists and Denylists in Multi-Tenant Systems

Without a burndown plan, access lists become rigid, outdated, and risky. Prefer dynamic, policy-based controls that adapt over time.

July 18, 2025

by Ramchandran Maharajapuram Easwarasharma

· 4,000 Views · 1 Like

Practical Steps to Secure the Software Supply Chain End to End

Learn practical steps to secure your software supply chain, including governance, development, deployment, identity management, and incident response.

July 18, 2025

by Karteek Kotamsetty

· 4,633 Views · 1 Like

How Hackers Exploit Spring Core Vulnerability in 2025: Proactive Measures to Detect Emerging Cyber Threats

This tutorial explains how to develop an effective low-interaction honeypot emulating the Spring Cloud Gateway applications to trap hackers.

July 17, 2025

by Tanu Jain

· 4,945 Views · 3 Likes

11 Best Practices for Developing Secure Web Applications

Follow these 11 best practices to build secure web applications, including input validation, encryption, secure authentication, and regular security updates.

July 17, 2025

by Mitchell Jhonson

· 5,632 Views · 4 Likes

The Latest Security Topics