Security Resources

The Trust Surface: The Missing Complement to Attack Surface

Trust Surface framework for measuring risks from trusted identities, credentials, AI agents, and third-party integrations beyond the traditional attack surface.

July 30, 2026

by Igboanugo David Ugochukwu

CORE

· 2,449 Views · 1 Like

How to Protect Your AI Agents from Prompt Injection Attacks: An Active Defense Approach

Stop just blocking prompt injections. Learn how to use MIRAGE to trap AI agents in honeypots and force them to burn their own API tokens.

July 29, 2026

by Victoria Fonareva

· 3,346 Views

Engineering Production Agentic Systems: Part 2: The Guardrails

Learn how production AI agents use tool contracts, authorization scopes, audit trails, and risk-based human approval to safely take autonomous actions.

July 28, 2026

by Ram Ravishankar

· 2,279 Views

Designing Secure REST APIs With Spring Boot

Learn how to secure Spring Boot REST APIs with JWT validation, method-level authorization, input validation, rate limiting, CORS, secure logging, and more.

July 27, 2026

by Srivenkata Gantikota

· 3,303 Views · 1 Like

Securing Model Context Protocol Servers: 4 Gates From Code to Production

Secure MCP servers against prompt injection, data leaks, and denial-of-wallet with four practical, OWASP-aligned gates from code to production. Runnable code.

July 24, 2026

by Viquar Khan

CORE

· 4,094 Views · 2 Likes

The Rise of Agentic SRE: Humans, Agents, and Reliability

Agentic SRE speeds up incident response, but it also requires clear guardrails, strong observability, and human oversight.

July 23, 2026

by Neel Shah

· 4,895 Views · 1 Like

Why AI-Generated Code Fails Security Reviews 45% of the Time

AI coding tools produce security flaws in 45% of outputs, yet developers trust the code more despite no security gains in two years.

July 23, 2026

by sunil paidi

· 3,126 Views

Refresh Token Rotation in Node.js: Stopping Token Theft Without Logging Users Out

Implementing refresh token rotation with reuse detection, a pattern that limits the damage of a stolen token while keeping legitimate users logged in.

July 22, 2026

by Bilal Azam

· 3,413 Views

Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications

The latest MCP updates introduce security risks like protocol confusion. Quarkus mitigates these vectors using strict request filtering and enterprise security layers.

July 21, 2026

by Daniel Oh

CORE

· 3,554 Views

Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?

Root searches are cached and easy to access. Filtering forces requests to hit the backend database directly, triggering stricter anti-bot checks that block basic proxies.

July 21, 2026

by xiyun chen

· 2,529 Views

Scaling Row-Level Security With ABAC on Databricks Unity Catalog

Learn how to scale row-level security in Databricks Unity Catalog using a tag-driven ABAC pattern that reduces maintenance and simplifies onboarding.

July 20, 2026

by Sriram Vadlamani

· 2,666 Views

Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions

Circular RLS policy dependencies in PostgreSQL silently return no rows. Here is why it happens and how SECURITY DEFINER functions fix it.

July 20, 2026

by Lex Mulier

· 2,467 Views · 1 Like

Security Is a Platform Property, Not a Pipeline Step

Security works best when it is built into the platform: Terraform guardrails, CI/CD checks, and golden path templates make secure delivery the default.

July 20, 2026

by Naveen Kalapala

· 2,578 Views

The Agent Security Split: Tool Layer vs Sandbox Layer

Why enterprise agent security requires decoupling the tool layer from the sandbox layer, and how the helmdeck + NVIDIA OpenShell architecture enforces it.

July 20, 2026

by Tosin Akinosho

· 1,905 Views