Security Resources

AI-Powered Security for the Modern Software Supply Chain: Reinforcing Software Integrity in an Era of Autonomous Code and Expanding Risk

AI-driven tools enhance software supply chain security by automating threat detection, managing dependencies, and supporting compliance, while balancing risks.

July 17, 2025

by Akanksha Pathak

CORE

· 3,933 Views · 1 Like

The Invisible Risk in Your Middleware: A Next.js Flaw You Shouldn’t Ignore

A flaw in Next.js rewrites can silently bypass middleware, exposing protected routes—update, audit logic, and don’t rely on middleware alone.

July 16, 2025

by $$anonymous$$

· 4,396 Views · 3 Likes

Maximizing Return on Investment When Securing Our Supply Chains: Where to Focus Our Limited Time to Maximize Reward

This article explains how developers can ease DevSecOps burdens by automating supply chain security, starting with SBOMs and improving step by step.

July 16, 2025

by Justin Albano

CORE

· 2,104 Views

Compliance Automated Standard Solution (COMPASS), Part 8: Agentic AI Policy as Code for Compliance Automation With Prompt Declaration Language

Part of our compliance series—learn how Agentic AI and PDL help compliance teams turn natural language inputs into executable policy assessments at scale.

July 16, 2025

by Yuji Watanabe

· 2,335 Views · 1 Like

Securing Software Delivery: Zero Trust CI/CD Patterns for Modern Pipelines

Zero Trust CI/CD secures every pipeline action by verifying identity, intent, and execution environment before issuing short-lived, policy-approved access.

July 15, 2025

by Surya Avirneni

· 3,458 Views · 1 Like

Advanced SSL Certificate Troubleshooting for Windows: Chain of Trust, Debugging, and Best Practices

SSL/TLS certificates are foundational to secure communications on the internet. Windows environments present unique challenges that go beyond basics.

July 15, 2025

by Vidyasagar (Sarath Chandra) Machupalli FBCS

CORE

· 3,803 Views · 3 Likes

The 7 Biggest Cloud Misconfigurations That Hackers Love (and How to Fix Them)

Everyone's an admin until they shouldn't be. Ninety-nine percent of cloud identities have excessive permissions, making lateral movement trivial for attackers.

July 14, 2025

by David Iyanu Jonathan

· 3,619 Views · 5 Likes

AI-Powered Ransomware and Malware Detection in Cloud Environments

AI is reshaping malware and ransomware detection in cloud environments. It reviews core detection models, highlights technical challenges, and discusses future directions

July 14, 2025

by Eugene Aryeetey

· 1,960 Views

The Cybersecurity Blind Spot in DevOps Pipelines

DevOps pipelines create massive attack surfaces through leaks and misconfiguration, and trusted tools become attack vectors. Here are the steps on how to prevent them.

July 11, 2025

by Igboanugo David Ugochukwu

CORE

· 2,777 Views · 2 Likes

Modernize Your IAM Into Identity Fabric Powered by Connectors

In an era where most enterprises are moving their workloads to cloud, and AI-driven environments, modernizing IAM isn’t just a buzzword, but an absolute necessity.

July 10, 2025

by Anant Wairagade

· 2,085 Views

Zero-Trace Paradigm: Emerging Technologies in Personal Data Anonymization

Get the lowdown on the advantages and downsides of emerging data anonymization mechanisms that lay the groundwork for the zero-trace paradigm.

July 8, 2025

by David Balaban

· 1,760 Views

Self-Supervised Learning Techniques

Self-supervised learning (SSL) techniques like AMDIM and SimCLR enable robust tracking using unlabeled data, reducing costs, enhancing scalability, and improving accuracy

July 3, 2025

by Mostofa Shakib

· 1,768 Views

The OWASP Top 10 for LLM Applications: An Overview of AI Security Risks

Learn the top 10 security risks in LLM apps, from prompt injection to data leaks, and how to build safer, more reliable Gen-AI systems.

July 3, 2025

by Goutham Bandapati

· 1,866 Views · 1 Like

Microservice Madness: Debunking Myths and Exposing Pitfalls

The belief that "microservices eliminate dependencies" has probably caused more harm to our industry than the 2008 financial crisis did to finance!

July 2, 2025

by Thomas Hansen

CORE

· 2,923 Views · 7 Likes

A Keycloak Example: Building My First MCP Server Tools With Quarkus

Learn to build an MCP server for Keycloak. The article shows how to create a Model Context Protocol (MCP) server for Keycloak using Quarkus and Goose CLI.

July 1, 2025

by Shaaf Syed

· 3,366 Views · 5 Likes

CRITICAL_PROCESS_DIED: How to Fix This Windows Blue Screen Error

CRITICAL_PROCESS_DIED is a notorious Windows error that triggers the dreaded Blue Screen of Death (BSOD), leaving users frustrated and unsure of how to proceed.

July 1, 2025

by Jeremy Warren

· 27,446 Views · 1 Like

Threat Modeling for Developers: Identifying Security Risks in Software Projects

Threat modeling is a proactive security process that helps developers identify and mitigate potential threats early in the software development lifecycle.

June 30, 2025

by Daphne Dujali

· 1,693 Views · 1 Like

Blockchain in Healthcare: Enhancing Data Security and Interoperability

Explore how blockchain is reshaping healthcare's digital infrastructure. Learn about its challenges, mechanics, applications, and potential future impact.

June 30, 2025

by Pawan Deep Singh

· 1,568 Views · 2 Likes

Zero-Trust AI: Applying Cybersecurity Best Practices to AI Model Development

Powerful AI models, such as ChatGPT and Google's Gemini, are transforming technology, but they also pose significant security challenges.

June 30, 2025

by Rianat Abbas

· 1,822 Views · 2 Likes

The Untold Costs of Automation: Are We Sacrificing Security for Speed?

Automation boosts efficiency but can create security risks. Breaches like MOVEit show why oversight and audits are essential to prevent costly failures.

June 27, 2025

by Rasheed Afolabi

· 1,970 Views

The Latest Security Topics