Security Resources

Why Continuous Application Security Testing Is No Longer Optional

Point-in-time vulnerability testing is just a snapshot. In today’s threat environment, continuous application security testing shows real security posture.

September 11, 2026

by Jigar Shah

· 2,629 Views · 2 Likes

Part 2: Securing and Scaling Goose-to-Java Agent Traffic With agentgateway

Deploy agentgateway as a security proxy between Goose AI agents and Quarkus MCP servers to enforce JWT auth, RBAC, and tool-poisoning guardrails.

September 9, 2026

by Daniel Oh

CORE

· 3,830 Views · 2 Likes

Pipelines on Fire: Why Your CI/CD Tools Are the New Cyber Battlefield

Learn why CI/CD pipelines are becoming major security targets and how to protect runners, secrets, AI tools, and software supply chains.

September 9, 2026

by Igboanugo David Ugochukwu

CORE

· 3,039 Views · 2 Likes

Your Email Security Is a DNS Configuration Problem

Every email authentication control is really a DNS record, so most email security failures are DNS mechanics, not protocol misunderstandings.

September 8, 2026

by Vadim Ivanov

· 1,863 Views · 1 Like

The Bottleneck of Scaling

Learn how modern languages help developers take care of behind-the-scenes file descriptor management, kernel memory management, and heap management.

September 3, 2026

by Vishal Bhatia

· 2,997 Views · 2 Likes

Gossip on Cryptography: Part 3

In Part 3 of this casual, jargon-free series, we break down hashing, salting, rainbow table attacks, and asymmetric encryption (RSA) — all with everyday analogies.

September 3, 2026

by Sahil Aggarwal

· 2,623 Views · 4 Likes

Beyond Agent-Washing: The Engineering Principles Behind Production-Ready AI Agents

Enterprise AI agents need secure execution boundaries, deterministic logic, identity, governance, and auditing—not just intelligent models—to safely act in production.

September 2, 2026

by Igboanugo David Ugochukwu

CORE

· 3,192 Views · 1 Like

Designing a Dynamic Multi-Hierarchy Security Model for Analytics and Decision Support Systems

How we built row-level security across Workday HCM, Salesforce, Snowflake, Power BI, and Adaptive Planning that survives a reorganization.

August 31, 2026

by Yadi Reddy Mangannagari

· 2,704 Views · 2 Likes

Securing Database Connections With Mutual TLS

Mutual TLS strengthens database security by authenticating both clients and servers, reducing the risks associated with password-based authentication.

August 31, 2026

by Rahul Roy

· 3,013 Views · 1 Like

Secure AI Systems: Defending Enterprise Applications Against Agent-Era Threats

Secure enterprise AI agents with zero-trust, prompt defenses, identity isolation, secure orchestration, and continuous observability against emerging agent-era threats.

August 31, 2026

by Uthej Mopathi

CORE

· 2,650 Views · 4 Likes

Making User-Generated Sites Embeddable: X-Frame-Options vs CSP Frame-Ancestors

A blank “refused to connect” iframe is usually a legacy X-Frame-Options header. Here is how to make user content embeddable with CSP frame-ancestors and scoped headers.

August 28, 2026

by Ruslan Ianberdin

· 2,358 Views · 1 Like

Why Your Terraform Drift Alerts Are Useless (And How to Fix Them)

Terraform plan treats all drift equally, creating alert fatigue. A four-tier severity model (critical, high, medium, and low) based on resource type and attributes.

August 27, 2026

by Sudarshan Bhagvan Thakur

· 2,407 Views · 2 Likes

When Guest Access Becomes an Attack Surface: A Technical Analysis of the City-Forum Campaign

Learn how attackers enumerated Salesforce Experience Cloud and ServiceNow portals, and how defenders can detect, audit, and prevent guest-access abuse.

August 27, 2026

by Igboanugo David Ugochukwu

CORE

· 2,794 Views · 1 Like

Multi-Account AWS Architecture: Isolating PHI Workloads Without Slowing Down Engineering Teams

Multi-account AWS architecture enforces PHI workload isolation at the boundary level — making access control provable rather than arguable during security reviews.

August 24, 2026

by Garik H

· 2,333 Views · 1 Like

How to Secure Fintech REST APIs Against BOLA Vulnerabilities

Learn how to protect fintech REST APIs from BOLA attacks with object-level authorization, secure identifiers, access controls, and API security testing.

August 24, 2026

by Nanne Parmar

· 1,573 Views · 3 Likes

Why DAST Findings Are Hard to Fix and How to Make Them Actionable

Here's how repro evidence, ownership mapping, exploitability data, and retesting turn DAST alerts into fixes developers can actually act on.

August 20, 2026

by Philip Piletic

CORE

· 2,140 Views · 1 Like

Future-Proofing JWT Security: Crypto-Agility, Post-Quantum Signatures, and IAM Migration

Learn how to prepare JWT and IAM systems for post-quantum security with crypto-agility, safer algorithms, key rotation, and migration strategies for developers.

August 17, 2026

by Ravikanth G

· 1,219 Views · 3 Likes

5 Infrastructure Controls for Securing AI Agents

Prompt-based guardrails fail under adversarial pressure. Here are the five controls that helps to validate along with the configuration to implement them.

August 14, 2026

by Shekar Munirathnam

· 2,074 Views · 2 Likes

Why AWS and Azure Handle Data Perimeter Differently

AWS and Azure handle identities and audit logging in fundamentally different ways, changing what you see in your security logs when someone tries to access your data.

August 13, 2026

by Suresh Gururajan

· 2,516 Views · 2 Likes

The AI Memory Security Blueprint

Protect enterprise RAG systems with provenance, context isolation, and vector database governance to reduce retrieval poisoning and prompt injection risks.

August 12, 2026

by Igboanugo David Ugochukwu

CORE

· 3,729 Views · 3 Likes

The Latest Security Topics