Security Resources

The Silent Container Death: A TCP Dial That Never Times Out

A pod goes into CrashLoopBackOff. You pull the logs expecting a stack trace, a panic, an error string — and then nothing. No error. No exit message. Magic.

September 30, 2026

by Alexander Fo

· 2,316 Views · 1 Like

Detection and Response Did Its Job. Now Someone Has to Actually Fix It.

Here’s how attack evidence, ownership mapping, root cause tracing, developer routing, and retesting turn a contained incident into an actual fix.

September 29, 2026

by Philip Piletic

CORE

· 1,634 Views · 1 Like

Locking Down the Enterprise: Data Security Patterns for AI Integrations

Learn how to secure enterprise data in AI systems using data classification, access controls, encryption, vendor controls, prompt security, and output validation.

September 25, 2026

by Balaji Venkatasubramaniyar

CORE

· 1,826 Views · 1 Like

Building a Secure MCP Server for File Processing: Auth, Rate Limiting, and Idempotency

Building an MCP server that processes files introduces problems a typical read-only API doesn't have. Here's what mattered.

September 22, 2026

by Peter Ndumia

· 2,225 Views · 2 Likes

How to Build a Production-Ready iOS App With AI-Generated Code

AI-generated iOS apps need rigorous engineering across security, architecture, testing, observability, and reliability before production deployment.

September 21, 2026

by Uthej Mopathi

CORE

· 2,734 Views · 3 Likes

Your Application Has an Unindexed Attack Surface. Do You Know What’s in It?

Learn how forgotten internet-facing assets expand your attack surface and how continuous asset discovery, inventory, and ownership can reduce security risks.

September 21, 2026

by Igboanugo David Ugochukwu

CORE

· 1,761 Views · 2 Likes

Data Governance for the Agentic Era

This article explores how modern data governance and AI-ready architecture help enterprises manage data quality, risk, compliance, and AI at scale.

September 14, 2026

by Dr Gopala Krishna Behara

CORE

· 2,733 Views · 3 Likes

A Firewall for AI Agents: Enforce Authority at Every Tool Call

The control that actually stops an AI agent from causing harm runs on its tool calls, not on the words going into the model.

September 14, 2026

by Jithu Paulose

· 2,627 Views · 1 Like

Why Continuous Application Security Testing Is No Longer Optional

Point-in-time vulnerability testing is just a snapshot. In today’s threat environment, continuous application security testing shows real security posture.

September 11, 2026

by Jigar Shah

· 2,730 Views · 2 Likes

Part 2: Securing and Scaling Goose-to-Java Agent Traffic With agentgateway

Deploy agentgateway as a security proxy between Goose AI agents and Quarkus MCP servers to enforce JWT auth, RBAC, and tool-poisoning guardrails.

September 9, 2026

by Daniel Oh

CORE

· 4,105 Views · 2 Likes

Pipelines on Fire: Why Your CI/CD Tools Are the New Cyber Battlefield

Learn why CI/CD pipelines are becoming major security targets and how to protect runners, secrets, AI tools, and software supply chains.

September 9, 2026

by Igboanugo David Ugochukwu

CORE

· 3,144 Views · 2 Likes

Your Email Security Is a DNS Configuration Problem

Every email authentication control is really a DNS record, so most email security failures are DNS mechanics, not protocol misunderstandings.

September 8, 2026

by Vadim Ivanov

· 1,956 Views · 1 Like

The Bottleneck of Scaling

Learn how modern languages help developers take care of behind-the-scenes file descriptor management, kernel memory management, and heap management.

September 3, 2026

by Vishal Bhatia

· 3,109 Views · 2 Likes

Gossip on Cryptography: Part 3

In Part 3 of this casual, jargon-free series, we break down hashing, salting, rainbow table attacks, and asymmetric encryption (RSA) — all with everyday analogies.

September 3, 2026

by Sahil Aggarwal

· 2,713 Views · 4 Likes

Beyond Agent-Washing: The Engineering Principles Behind Production-Ready AI Agents

Enterprise AI agents need secure execution boundaries, deterministic logic, identity, governance, and auditing—not just intelligent models—to safely act in production.

September 2, 2026

by Igboanugo David Ugochukwu

CORE

· 3,308 Views · 1 Like

Designing a Dynamic Multi-Hierarchy Security Model for Analytics and Decision Support Systems

How we built row-level security across Workday HCM, Salesforce, Snowflake, Power BI, and Adaptive Planning that survives a reorganization.

August 31, 2026

by Yadi Reddy Mangannagari

· 2,792 Views · 2 Likes

Securing Database Connections With Mutual TLS

Mutual TLS strengthens database security by authenticating both clients and servers, reducing the risks associated with password-based authentication.

August 31, 2026

by Rahul Roy

· 3,117 Views · 1 Like

Secure AI Systems: Defending Enterprise Applications Against Agent-Era Threats

Secure enterprise AI agents with zero-trust, prompt defenses, identity isolation, secure orchestration, and continuous observability against emerging agent-era threats.

August 31, 2026

by Uthej Mopathi

CORE

· 2,756 Views · 4 Likes

Making User-Generated Sites Embeddable: X-Frame-Options vs CSP Frame-Ancestors

A blank “refused to connect” iframe is usually a legacy X-Frame-Options header. Here is how to make user content embeddable with CSP frame-ancestors and scoped headers.

August 28, 2026

by Ruslan Ianberdin

· 2,579 Views · 1 Like

Why Your Terraform Drift Alerts Are Useless (And How to Fix Them)

Terraform plan treats all drift equally, creating alert fatigue. A four-tier severity model (critical, high, medium, and low) based on resource type and attributes.

August 27, 2026

by Sudarshan Bhagvan Thakur

· 2,498 Views · 2 Likes

The Latest Security Topics