Security Resources

The Agent in Your Pipeline Doesn't Have a Manager. That's the Problem.

AI agents are flooding development environments faster than governance can keep up. Learn why visibility, identity, and access controls matter now.

August 11, 2026

by Igboanugo David Ugochukwu

CORE

· 1,721 Views · 1 Like

Uncover Security Risks in Your Agent Skills Before Deploying

Catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only let your agent load skills that passed.

August 11, 2026

by Scarlett Attensil

· 1,366 Views · 1 Like

We Empowered AI Agents With 'Hands,' Now We Require Kernel-Level Vision to Monitor Them

MCP tool use creates massive application-layer blind spots. Close the gap by monitoring agent behavior directly in the kernel space.

August 11, 2026

by Ammar Ekbote

· 2,127 Views · 2 Likes

A Practical Pipeline for Identifying Sensitive Columns Before Test Data Masking

In this article, I will be introducing a pipeline designed to identify sensitive data columns before masking steps and improve the efficiency of the data masking process.

August 10, 2026

by Siyuan Feng

· 1,677 Views · 1 Like

Mastering Enterprise Security in Microsoft Power Platform

Learn how environments, DLP policies, Dataverse roles, and a Center of Excellence keep Power Platform secure without slowing teams down.

August 7, 2026

by Kaushal Shah

· 2,608 Views · 1 Like

A Zero-Trust Implementation Framework for Cloud Migrations: Lessons From Enterprise Deployments

A zero-trust framework for cloud migrations, grounded in real enterprise deployment lessons. Perimeter security doesn't hold up once workloads move to the cloud.

August 7, 2026

by Srinivasarao Thumala

· 1,749 Views · 1 Like

Securing Branch Networks With Firewalls, VPNs, IDS/IPS, and Identity-Based Access

Deny-by-default firewall. VPN scoped tight. IDS behind egress. Identity drives VLAN, not subnet, shifting security decisions from location to identity.

August 5, 2026

by Kamal chand Narra

· 1,723 Views · 1 Like

Performance Testing With JMeter Beyond the Basics: Distributed Load, Realistic Profiles, and Identifying Security Bottlenecks

Learn how to build realistic JMeter load tests with production traffic patterns, distributed testing, session modeling, and security performance analysis.

August 4, 2026

by Srivenkata Gantikota

· 2,851 Views · 3 Likes

Why Enterprise AI Agents Fail: A Runtime Data Governance Pattern for Reliable Answers

Why enterprise AI agents fail on production data, and a runtime governance pattern using data contracts, lineage signals, and guardrails to prevent it.

August 3, 2026

by Avinash Maddineni

· 2,893 Views · 4 Likes

Securing Loop Engineering: Six Trust Boundaries for Autonomous Agents

Loop engineering makes agents act repeatedly. Security decides which inputs, credentials, memories, evaluators, and triggers are allowed to influence action.

July 31, 2026

by Jithu Paulose

· 1,742 Views · 2 Likes

Retrieval Augmented Generation With Spring AI 2.0, Claude, and PGvector

Build a RAG service with Spring AI 2.0, Claude, and PGvector that answers questions from your own documents with a single API key.

July 31, 2026

by Murat Balkan

CORE

· 2,999 Views · 2 Likes

The Trust Surface: The Missing Complement to Attack Surface

Trust Surface framework for measuring risks from trusted identities, credentials, AI agents, and third-party integrations beyond the traditional attack surface.

July 30, 2026

by Igboanugo David Ugochukwu

CORE

· 2,510 Views · 2 Likes

How to Protect Your AI Agents from Prompt Injection Attacks: An Active Defense Approach

Stop just blocking prompt injections. Learn how to use MIRAGE to trap AI agents in honeypots and force them to burn their own API tokens.

July 29, 2026

by Victoria Fonareva

· 3,412 Views · 1 Like

Engineering Production Agentic Systems: Part 2: The Guardrails

Learn how production AI agents use tool contracts, authorization scopes, audit trails, and risk-based human approval to safely take autonomous actions.

July 28, 2026

by Ram Ravishankar

· 2,349 Views · 1 Like

Designing Secure REST APIs With Spring Boot

Learn how to secure Spring Boot REST APIs with JWT validation, method-level authorization, input validation, rate limiting, CORS, secure logging, and more.

July 27, 2026

by Srivenkata Gantikota

· 3,370 Views · 2 Likes

Securing Model Context Protocol Servers: 4 Gates From Code to Production

Secure MCP servers against prompt injection, data leaks, and denial-of-wallet with four practical, OWASP-aligned gates from code to production. Runnable code.

July 24, 2026

by Viquar Khan

CORE

· 4,243 Views · 3 Likes

The Rise of Agentic SRE: Humans, Agents, and Reliability

Agentic SRE speeds up incident response, but it also requires clear guardrails, strong observability, and human oversight.

July 23, 2026

by Neel Shah

· 5,093 Views · 2 Likes

Why AI-Generated Code Fails Security Reviews 45% of the Time

AI coding tools produce security flaws in 45% of outputs, yet developers trust the code more despite no security gains in two years.

July 23, 2026

by sunil paidi

· 3,178 Views · 1 Like

Refresh Token Rotation in Node.js: Stopping Token Theft Without Logging Users Out

Implementing refresh token rotation with reuse detection, a pattern that limits the damage of a stolen token while keeping legitimate users logged in.

July 22, 2026

by Bilal Azam

· 3,771 Views · 1 Like

Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications

The latest MCP updates introduce security risks like protocol confusion. Quarkus mitigates these vectors using strict request filtering and enterprise security layers.

July 21, 2026

by Daniel Oh

CORE

· 3,638 Views · 1 Like

The Latest Security Topics