Security Resources

Scaling Row-Level Security With ABAC on Databricks Unity Catalog

Learn how to scale row-level security in Databricks Unity Catalog using a tag-driven ABAC pattern that reduces maintenance and simplifies onboarding.

July 20, 2026

by Sriram Vadlamani

· 2,548 Views

Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions

Circular RLS policy dependencies in PostgreSQL silently return no rows. Here is why it happens and how SECURITY DEFINER functions fix it.

July 20, 2026

by Lex Mulier

· 2,323 Views · 1 Like

Security Is a Platform Property, Not a Pipeline Step

Security works best when it is built into the platform: Terraform guardrails, CI/CD checks, and golden path templates make secure delivery the default.

July 20, 2026

by Naveen Kalapala

· 2,480 Views

The Agent Security Split: Tool Layer vs Sandbox Layer

Why enterprise agent security requires decoupling the tool layer from the sandbox layer, and how the helmdeck + NVIDIA OpenShell architecture enforces it.

July 20, 2026

by Tosin Akinosho

· 1,796 Views

Every SOC Today Is Answering the Wrong Question

Rethink SOC architecture with Continuous Evidence Graphs that connect identities, sessions, and resources instead of relying on alert timelines.

July 17, 2026

by Igboanugo David Ugochukwu

CORE

· 3,054 Views

Your Agent Trusts That Wiki. Should It?

AI agents need more than execution correctness. Instruction provenance must be a first-class security property before privileged actions are trusted.

July 16, 2026

by Abhinav Srivastava

· 4,304 Views

12 Factor Framework for Building Secure and Compliant Cloud Applications

Learn how a practical 12-factor framework embeds security, compliance, resilience, and governance into cloud-native applications.

July 14, 2026

by Josephine Eskaline Joyce, Ph.D

CORE

· 3,152 Views · 3 Likes

Implementing Zero-Trust Networking and Identity for Microsoft Foundry Agents

This article explains how to implement a zero-trust security architecture for Microsoft Foundry agents by combining identity-first authentication.

July 13, 2026

by Jubin Soni, FBCS

CORE

· 1,897 Views

Machine Identity Debt: Why Human Identity Is No Longer Cloud Security's Primary Boundary

Machine identities now outnumber human ones in cloud environments. Learn how to secure workloads with modern identity governance and trust.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 6,666 Views · 1 Like

Goodbye, Skeleton Keys: Why Machine Identity Broke IAM, and What SPIFFE Is Doing About It

The Salesloft Drift breach showed why machine identity has outgrown IAM. Here’s how SPIFFE can reduce token sprawl and trust risk.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 2,944 Views

AI Can't Defend What It Can't See

AI can only defend what it can see. Give it incomplete data, and it won't warn you. It quietly reports everything as healthy while real attacks slip through unseen.

July 7, 2026

by Jithu Paulose

· 2,434 Views · 2 Likes

Prompt Injection Attacks and Hidden Security Risks in LLM Applications

Prompt injection hijacks an LLM by exploiting its inability to separate data from commands. Direct and indirect attacks require layered defenses, not one fix.

July 3, 2026

by Karini Kapoor

· 3,107 Views · 2 Likes

Identity Was Never the Real Problem. Intent Is — and Almost Nobody Is Building For It Yet

Machine identity didn't fail in recent breaches — authorization did. Learn how intent-bound access with RFC 9396 and CAE can reduce AI security risk.

July 2, 2026

by Igboanugo David Ugochukwu

CORE

· 3,508 Views · 1 Like

One Stolen Key, One Stolen Token: Why Machine Identity Is Cloud-Native's Quietest Crisis — and the Only Fix That Actually Holds

Learn how stolen machine credentials fuel major cloud breaches and how policy-as-code and short-lived identities help stop modern attacks.

July 1, 2026

by Igboanugo David Ugochukwu

CORE

· 3,933 Views

Can Rust Have Zero-Cost Dependency Injection?

This article explains compile-time dependency injection in Rust without reflection, runtime containers, dyn, Arc, Rc, or runtime resolution overhead.

July 1, 2026

by Dmytro Brazhnyk

· 2,401 Views

An Ingredient List Doesn't Stop the Worm: What SBOMs Can and Can't Do

An SBOM alone can't stop supply chain attacks. Learn why software signing, provenance, and deployment verification are essential for secure releases.

June 30, 2026

by Igboanugo David Ugochukwu

CORE

· 1,688 Views

The New Insider Threat Isn't Human: Securing AI Agents Before They Secure Themselves

AI agents are becoming powerful insiders. Learn how identity, MCP security, least privilege, and policy enforcement reduce emerging risks.

June 26, 2026

by Igboanugo David Ugochukwu

CORE

· 2,213 Views · 1 Like

Two Clocks Are Running Out at Once, and Almost Nobody Is Watching Both

Quantum computing and AI coding tools are changing security. Learn why crypto-agility and better governance are now critical.

June 26, 2026

by Igboanugo David Ugochukwu

CORE

· 2,234 Views · 2 Likes

SBOMs improve software supply chain transparency, but sharing them carelessly creates risk. Learn how controlled disclosure balances trust and security.

June 25, 2026

by Sven Ruppert

CORE

· 2,022 Views · 1 Like

Your Biggest Identity Problem Isn't Your Employees Anymore; It's Everything Else

Machine identities are now the primary attack surface. Learn how Zero Trust, SPIFFE, and IAM automation help secure them.

June 24, 2026

by Igboanugo David Ugochukwu

CORE

· 1,928 Views · 1 Like

The Latest Security Topics