Security Resources

Securing Model Context Protocol Servers: 4 Gates From Code to Production

Secure MCP servers against prompt injection, data leaks, and denial-of-wallet with four practical, OWASP-aligned gates from code to production. Runnable code.

July 24, 2026

by Viquar Khan

· 3,769 Views · 2 Likes

The Rise of Agentic SRE: Humans, Agents, and Reliability

Agentic SRE speeds up incident response, but it also requires clear guardrails, strong observability, and human oversight.

July 23, 2026

by Neel Shah

· 4,207 Views · 1 Like

Why AI-Generated Code Fails Security Reviews 45% of the Time

AI coding tools produce security flaws in 45% of outputs, yet developers trust the code more despite no security gains in two years.

July 23, 2026

by sunil paidi

· 2,958 Views

Refresh Token Rotation in Node.js: Stopping Token Theft Without Logging Users Out

Implementing refresh token rotation with reuse detection, a pattern that limits the damage of a stolen token while keeping legitimate users logged in.

July 22, 2026

by Bilal Azam

· 2,409 Views

Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications

The latest MCP updates introduce security risks like protocol confusion. Quarkus mitigates these vectors using strict request filtering and enterprise security layers.

July 21, 2026

by Daniel Oh

CORE

· 3,187 Views

Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?

Root searches are cached and easy to access. Filtering forces requests to hit the backend database directly, triggering stricter anti-bot checks that block basic proxies.

July 21, 2026

by xiyun chen

· 2,394 Views

Scaling Row-Level Security With ABAC on Databricks Unity Catalog

Learn how to scale row-level security in Databricks Unity Catalog using a tag-driven ABAC pattern that reduces maintenance and simplifies onboarding.

July 20, 2026

by Sriram Vadlamani

· 2,485 Views

Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions

Circular RLS policy dependencies in PostgreSQL silently return no rows. Here is why it happens and how SECURITY DEFINER functions fix it.

July 20, 2026

by Lex Mulier

· 2,219 Views · 1 Like

Security Is a Platform Property, Not a Pipeline Step

Security works best when it is built into the platform: Terraform guardrails, CI/CD checks, and golden path templates make secure delivery the default.

July 20, 2026

by Naveen Kalapala

· 2,417 Views

The Agent Security Split: Tool Layer vs Sandbox Layer

Why enterprise agent security requires decoupling the tool layer from the sandbox layer, and how the helmdeck + NVIDIA OpenShell architecture enforces it.

July 20, 2026

by Tosin Akinosho

· 1,759 Views

Every SOC Today Is Answering the Wrong Question

Rethink SOC architecture with Continuous Evidence Graphs that connect identities, sessions, and resources instead of relying on alert timelines.

July 17, 2026

by Igboanugo David Ugochukwu

CORE

· 2,999 Views

Your Agent Trusts That Wiki. Should It?

AI agents need more than execution correctness. Instruction provenance must be a first-class security property before privileged actions are trusted.

July 16, 2026

by Abhinav Srivastava

· 4,251 Views

12 Factor Framework for Building Secure and Compliant Cloud Applications

Learn how a practical 12-factor framework embeds security, compliance, resilience, and governance into cloud-native applications.

July 14, 2026

by Josephine Eskaline Joyce

CORE

· 3,049 Views · 3 Likes

Implementing Zero-Trust Networking and Identity for Microsoft Foundry Agents

This article explains how to implement a zero-trust security architecture for Microsoft Foundry agents by combining identity-first authentication.

July 13, 2026

by Jubin Soni, FBCS

CORE

· 1,859 Views

Machine Identity Debt: Why Human Identity Is No Longer Cloud Security's Primary Boundary

Machine identities now outnumber human ones in cloud environments. Learn how to secure workloads with modern identity governance and trust.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 6,533 Views · 1 Like

Goodbye, Skeleton Keys: Why Machine Identity Broke IAM, and What SPIFFE Is Doing About It

The Salesloft Drift breach showed why machine identity has outgrown IAM. Here’s how SPIFFE can reduce token sprawl and trust risk.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 2,894 Views

AI Can't Defend What It Can't See

AI can only defend what it can see. Give it incomplete data, and it won't warn you. It quietly reports everything as healthy while real attacks slip through unseen.

July 7, 2026

by Jithu Paulose

· 2,376 Views · 2 Likes

Prompt Injection Attacks and Hidden Security Risks in LLM Applications

Prompt injection hijacks an LLM by exploiting its inability to separate data from commands. Direct and indirect attacks require layered defenses, not one fix.

July 3, 2026

by Karini Kapoor

· 2,975 Views · 2 Likes