Security Resources

The Kill Switch: A Coder's Silent Act of Revenge

A bitter developer plants a hidden kill switch, exposing the dangers of insider threats and how a single line of code can cripple entire systems from within.

August 18, 2025

by Omkar Bhalekar

· 2,483 Views · 1 Like

How to Architect a Compliant Cloud for Healthcare Clients (Azure Edition)

We share how we built a secure, compliant cloud on Azure for healthcare clients using native services like RBAC, CMK encryption, and policy enforcement.

August 15, 2025

by Kishore Thota

· 3,567 Views · 3 Likes

How to Build ML Experimentation Platforms You Can Trust?

Trustworthy ML needs more than dashboards — it relies on layered systems with monitoring, testing, and statistical tools to ensure reliable experimentation.

August 15, 2025

by Arun Thomas

· 1,984 Views · 1 Like

The Next Frontier in Cybersecurity: Securing AI Agents Is Now Critical and Most Companies Aren’t Ready

AI agents are rewriting the rules of cybersecurity. Learn why legacy tools fail and what it takes to secure autonomous systems.

August 14, 2025

by Arjun Subedi

· 2,668 Views · 5 Likes

Software Security Treat or Threat? Leveraging SBOMs to Control Your Supply Chain Chaos [Infographic]

Learn about the required and recommended SBOM components — plus key security practices — to enhance your security posture along the entire software supply chain.

August 13, 2025

by DZone Editorial

· 2,213 Views · 3 Likes

Secure Private Connectivity Between VMware and Object Storage: An Enterprise Architecture Guide

This guide details how to establish secure private connectivity between VMware and Object Storage using Cloud Service Endpoints.

August 13, 2025

by Vidyasagar (Sarath Chandra) Machupalli FBCS

CORE

· 2,471 Views · 4 Likes

Development of System Configuration Management: Introduction

We replaced open-source SCM with our own. This series shares our experience, lessons, and advice for others facing the same choice.

August 11, 2025

by Georgii Kashintsev

· 2,185 Views · 4 Likes

Data Mesh Security: How to Protect Decentralized Data Architectures

Data mesh decentralizes data ownership, creating new security gaps. This guide covers zero trust, federated governance, and observability to secure modern architectures.

August 11, 2025

by Pranjal Sharma

· 6,385 Views · 8 Likes

Designing Secure APIs: A Developer’s Guide to Authentication, Rate Limiting, and Data Validation

Secure APIs with strong authentication, rate limiting, input validation, and versioning to prevent attacks, manage traffic, and ensure long-term stability.

August 8, 2025

by Surendra Pandey

· 2,176 Views · 3 Likes

Compliance Automated Standard Solution (COMPASS), Part 9: Taking OSCAL-Compass to Industry Complexity Level

In this article, we describe specific use-cases that the Singapore GovTech team encountered on the use of OSCAL and how Trestle was used to support them.

August 7, 2025

by Anca Sailer

· 1,866 Views · 2 Likes

JWT Policy Enforcement, Rate Limiting, IP White Listing: Using Mulesoft, API Security, Cloudhub 2.0

Learn how to enforce JWT policies in API Manager with a RAML project. Secure endpoints using Auth0, plus apply IP whitelisting and rate limiting in Anypoint.

August 7, 2025

by ARINDAM GOSWAMI

· 2,490 Views

Why Developers Should Pay Attention to Internal Directory Security

Most breaches spread from weak internal controls. Developers can spot risks early, limit privilege creep, and help stop attacks before they escalate.

August 4, 2025

by Alex Vakulov

CORE

· 2,096 Views · 1 Like

Self-Managed Keycloak for App Connect Dashboard and Designer Authoring

This tutorial explains how to use your Keycloak instance to manage authentication and authorization for App Connect Dashboard and Designer Authoring.

August 4, 2025

by Shanna Xu

· 2,402 Views · 1 Like

What Developers Need to Know About IP API Privacy in Mobile Apps (2025 Update)

Use IP APIs in mobile geolocation apps safely in 2025. Learn key risks, privacy law tips, and best practices for developers.

July 31, 2025

by Ramesh Chauhan

· 3,357 Views

Set Up OpenID Connect With Keycloak: A Step-by-Step Guide

This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak with key concepts and prerequisites.

July 31, 2025

by Gunter Rotsaert

CORE

· 2,690 Views · 2 Likes

Bring Your Own Feed (BYOF): An Engineer's Guide to Effective Threat Intelligence

Let’s look at threat intelligence, what it is, why it’s important, and how to “BYOF” — bring your own custom threat intelligence feeds.

July 30, 2025

by John Vester

CORE

· 2,451 Views · 2 Likes

The Developer's Guide to Cloud Security Career Opportunities

The question isn't whether you should consider cloud security — it's how quickly you can position yourself to take advantage of the opportunities.

July 30, 2025

by Philip Piletic

CORE

· 2,542 Views · 2 Likes

Federated Identity: The Modern Approach to Cloud Security and Automation

Long-lived cloud credentials are risky. Federated identity lets workloads use short-lived tokens from a trusted IdP, improving security without storing secrets.

July 29, 2025

by Pradeep Kumar Goud Gaddamidi

· 2,677 Views

Building Secure Transaction APIs for Modern Fintech Systems Using GitHub Copilot

Use GitHub Copilot to build secure fintech APIs faster by adding input validation, rate limiting, and safe error handling, without compromising compliance or trust.

July 29, 2025

by Sibasis Padhi

· 2,923 Views · 3 Likes

Why Most IaC Strategies Still Fail (And How to Fix Them)

Infrastructure as Code offers a compelling vision for solving the chaos of cloud ops, but in practice, many organizations remain tangled in complexity.

July 29, 2025

by Ido Neeman

· 2,109 Views

The Latest Security Topics