Security Resources

Uncover Security Risks in Your Agent Skills Before Deploying

Catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only let your agent load skills that passed.

August 11, 2026

by Scarlett Attensil

· 1,236 Views

We Empowered AI Agents With 'Hands,' Now We Require Kernel-Level Vision to Monitor Them

MCP tool use creates massive application-layer blind spots. Close the gap by monitoring agent behavior directly in the kernel space.

August 11, 2026

by Ammar Ekbote

· 1,929 Views · 1 Like

A Practical Pipeline for Identifying Sensitive Columns Before Test Data Masking

In this article, I will be introducing a pipeline designed to identify sensitive data columns before masking steps and improve the efficiency of the data masking process.

August 10, 2026

by Siyuan Feng

· 1,363 Views

Mastering Enterprise Security in Microsoft Power Platform

Learn how environments, DLP policies, Dataverse roles, and a Center of Excellence keep Power Platform secure without slowing teams down.

August 7, 2026

by Kaushal Shah

· 2,271 Views

A Zero-Trust Implementation Framework for Cloud Migrations: Lessons From Enterprise Deployments

A zero-trust framework for cloud migrations, grounded in real enterprise deployment lessons. Perimeter security doesn't hold up once workloads move to the cloud.

August 7, 2026

by Srinivasarao Thumala

· 1,567 Views

Securing Branch Networks With Firewalls, VPNs, IDS/IPS, and Identity-Based Access

Deny-by-default firewall. VPN scoped tight. IDS behind egress. Identity drives VLAN, not subnet, shifting security decisions from location to identity.

August 5, 2026

by Kamal chand Narra

· 1,507 Views

Performance Testing With JMeter Beyond the Basics: Distributed Load, Realistic Profiles, and Identifying Security Bottlenecks

Learn how to build realistic JMeter load tests with production traffic patterns, distributed testing, session modeling, and security performance analysis.

August 4, 2026

by Srivenkata Gantikota

· 2,665 Views · 1 Like

Why Enterprise AI Agents Fail: A Runtime Data Governance Pattern for Reliable Answers

Why enterprise AI agents fail on production data, and a runtime governance pattern using data contracts, lineage signals, and guardrails to prevent it.

August 3, 2026

by Avinash Maddineni

· 2,293 Views · 3 Likes

Securing Loop Engineering: Six Trust Boundaries for Autonomous Agents

Loop engineering makes agents act repeatedly. Security decides which inputs, credentials, memories, evaluators, and triggers are allowed to influence action.

July 31, 2026

by Jithu Paulose

· 1,557 Views · 1 Like

Retrieval Augmented Generation With Spring AI 2.0, Claude, and PGvector

Build a RAG service with Spring AI 2.0, Claude, and PGvector that answers questions from your own documents with a single API key.

July 31, 2026

by Murat Balkan

CORE

· 2,566 Views · 2 Likes

The Trust Surface: The Missing Complement to Attack Surface

Trust Surface framework for measuring risks from trusted identities, credentials, AI agents, and third-party integrations beyond the traditional attack surface.

July 30, 2026

by Igboanugo David Ugochukwu

CORE

· 2,237 Views · 1 Like

How to Protect Your AI Agents from Prompt Injection Attacks: An Active Defense Approach

Stop just blocking prompt injections. Learn how to use MIRAGE to trap AI agents in honeypots and force them to burn their own API tokens.

July 29, 2026

by Victoria Fonareva

· 3,174 Views

Engineering Production Agentic Systems: Part 2: The Guardrails

Learn how production AI agents use tool contracts, authorization scopes, audit trails, and risk-based human approval to safely take autonomous actions.

July 28, 2026

by Ram Ravishankar

· 2,077 Views

Designing Secure REST APIs With Spring Boot

Learn how to secure Spring Boot REST APIs with JWT validation, method-level authorization, input validation, rate limiting, CORS, secure logging, and more.

July 27, 2026

by Srivenkata Gantikota

· 3,127 Views · 1 Like

Securing Model Context Protocol Servers: 4 Gates From Code to Production

Secure MCP servers against prompt injection, data leaks, and denial-of-wallet with four practical, OWASP-aligned gates from code to production. Runnable code.

July 24, 2026

by Viquar Khan

CORE

· 3,916 Views · 2 Likes

The Rise of Agentic SRE: Humans, Agents, and Reliability

Agentic SRE speeds up incident response, but it also requires clear guardrails, strong observability, and human oversight.

July 23, 2026

by Neel Shah

· 4,590 Views · 1 Like

Why AI-Generated Code Fails Security Reviews 45% of the Time

AI coding tools produce security flaws in 45% of outputs, yet developers trust the code more despite no security gains in two years.

July 23, 2026

by sunil paidi

· 3,037 Views

Refresh Token Rotation in Node.js: Stopping Token Theft Without Logging Users Out

Implementing refresh token rotation with reuse detection, a pattern that limits the damage of a stolen token while keeping legitimate users logged in.

July 22, 2026

by Bilal Azam

· 2,856 Views

Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications

The latest MCP updates introduce security risks like protocol confusion. Quarkus mitigates these vectors using strict request filtering and enterprise security layers.

July 21, 2026

by Daniel Oh

CORE

· 3,433 Views

Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?

Root searches are cached and easy to access. Filtering forces requests to hit the backend database directly, triggering stricter anti-bot checks that block basic proxies.

July 21, 2026

by xiyun chen

· 2,449 Views

The Latest Security Topics