Security Resources

Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?

Root searches are cached and easy to access. Filtering forces requests to hit the backend database directly, triggering stricter anti-bot checks that block basic proxies.

July 21, 2026

by xiyun chen

· 2,606 Views · 1 Like

Scaling Row-Level Security With ABAC on Databricks Unity Catalog

Learn how to scale row-level security in Databricks Unity Catalog using a tag-driven ABAC pattern that reduces maintenance and simplifies onboarding.

July 20, 2026

by Sriram Vadlamani

· 2,741 Views · 1 Like

Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions

Circular RLS policy dependencies in PostgreSQL silently return no rows. Here is why it happens and how SECURITY DEFINER functions fix it.

July 20, 2026

by Lex Mulier

· 2,546 Views · 2 Likes

Security Is a Platform Property, Not a Pipeline Step

Security works best when it is built into the platform: Terraform guardrails, CI/CD checks, and golden path templates make secure delivery the default.

July 20, 2026

by Naveen Kalapala

· 2,634 Views · 1 Like

The Agent Security Split: Tool Layer vs Sandbox Layer

Why enterprise agent security requires decoupling the tool layer from the sandbox layer, and how the helmdeck + NVIDIA OpenShell architecture enforces it.

July 20, 2026

by Tosin Akinosho

· 1,946 Views · 1 Like

Every SOC Today Is Answering the Wrong Question

Rethink SOC architecture with Continuous Evidence Graphs that connect identities, sessions, and resources instead of relying on alert timelines.

July 17, 2026

by Igboanugo David Ugochukwu

CORE

· 3,234 Views · 1 Like

Your Agent Trusts That Wiki. Should It?

AI agents need more than execution correctness. Instruction provenance must be a first-class security property before privileged actions are trusted.

July 16, 2026

by Abhinav Srivastava

· 4,460 Views · 1 Like

12 Factor Framework for Building Secure and Compliant Cloud Applications

Learn how a practical 12-factor framework embeds security, compliance, resilience, and governance into cloud-native applications.

July 14, 2026

by Josephine Eskaline Joyce, Ph.D

CORE

· 3,329 Views · 4 Likes

Implementing Zero-Trust Networking and Identity for Microsoft Foundry Agents

This article explains how to implement a zero-trust security architecture for Microsoft Foundry agents by combining identity-first authentication.

July 13, 2026

by Jubin Soni, FBCS

CORE

· 4,898 Views · 2 Likes

Machine Identity Debt: Why Human Identity Is No Longer Cloud Security's Primary Boundary

Machine identities now outnumber human ones in cloud environments. Learn how to secure workloads with modern identity governance and trust.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 6,859 Views · 2 Likes

Goodbye, Skeleton Keys: Why Machine Identity Broke IAM, and What SPIFFE Is Doing About It

The Salesloft Drift breach showed why machine identity has outgrown IAM. Here’s how SPIFFE can reduce token sprawl and trust risk.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 3,093 Views · 1 Like

AI Can't Defend What It Can't See

AI can only defend what it can see. Give it incomplete data, and it won't warn you. It quietly reports everything as healthy while real attacks slip through unseen.

July 7, 2026

by Jithu Paulose

· 2,589 Views · 3 Likes

Prompt Injection Attacks and Hidden Security Risks in LLM Applications

Prompt injection hijacks an LLM by exploiting its inability to separate data from commands. Direct and indirect attacks require layered defenses, not one fix.

July 3, 2026

by Karini Kapoor

· 3,324 Views · 3 Likes

Identity Was Never the Real Problem. Intent Is — and Almost Nobody Is Building For It Yet

Machine identity didn't fail in recent breaches — authorization did. Learn how intent-bound access with RFC 9396 and CAE can reduce AI security risk.

July 2, 2026

by Igboanugo David Ugochukwu

CORE

· 3,637 Views · 2 Likes

One Stolen Key, One Stolen Token: Why Machine Identity Is Cloud-Native's Quietest Crisis — and the Only Fix That Actually Holds

Learn how stolen machine credentials fuel major cloud breaches and how policy-as-code and short-lived identities help stop modern attacks.

July 1, 2026

by Igboanugo David Ugochukwu

CORE

· 4,145 Views · 1 Like

Can Rust Have Zero-Cost Dependency Injection?

This article explains compile-time dependency injection in Rust without reflection, runtime containers, dyn, Arc, Rc, or runtime resolution overhead.

July 1, 2026

by Dmytro Brazhnyk

· 2,472 Views · 1 Like

An Ingredient List Doesn't Stop the Worm: What SBOMs Can and Can't Do

An SBOM alone can't stop supply chain attacks. Learn why software signing, provenance, and deployment verification are essential for secure releases.

June 30, 2026

by Igboanugo David Ugochukwu

CORE

· 1,806 Views · 1 Like

The New Insider Threat Isn't Human: Securing AI Agents Before They Secure Themselves

AI agents are becoming powerful insiders. Learn how identity, MCP security, least privilege, and policy enforcement reduce emerging risks.

June 26, 2026

by Igboanugo David Ugochukwu

CORE

· 2,374 Views · 2 Likes

Two Clocks Are Running Out at Once, and Almost Nobody Is Watching Both

Quantum computing and AI coding tools are changing security. Learn why crypto-agility and better governance are now critical.

June 26, 2026

by Igboanugo David Ugochukwu

CORE

· 2,343 Views · 3 Likes

SBOMs improve software supply chain transparency, but sharing them carelessly creates risk. Learn how controlled disclosure balances trust and security.

June 25, 2026

by Sven Ruppert

CORE

· 2,134 Views · 2 Likes

The Latest Security Topics