Security Resources

AI, OAuth, and Other Platform APIs in the Core

Deeper AI integration in the framework core, modern authentication via OAuth / OIDC and WebAuthn passkeys driven from the system browser, and a few smaller additions.

June 24, 2026

by Shai Almog

CORE

· 2,068 Views · 1 Like

Implementing Asynchronous Communication Between Microservices Using Kafka and Spring Boot

Kafka decouples services, buffers spikes, and routes failures to a DLT. Schemas are contracts; consumers must be idempotent.

June 24, 2026

by Mallikharjuna Manepalli

· 3,443 Views · 1 Like

Architectural Collapse: How Extension Poisoning, Node Vulnerabilities, and Infrastructure Fog Enabled the GitHub Repository Breach

A major GitHub breach showed how extension poisoning, Node ecosystem weaknesses, and insecure developer workstations can bypass traditional security defenses.

June 23, 2026

by Akash Lomas

· 3,372 Views · 1 Like

Phantom APIs Are Eating Your Attack Surface, and Most Security Teams Are Still Looking the Other Way

Undocumented phantom APIs are creating hidden security risks. Learn how AI-generated endpoints evade reviews and expand attack surfaces.

June 23, 2026

by Igboanugo David Ugochukwu

CORE

· 2,384 Views

The Breach Was Never at the Door

OAuth tokens and AI agents can bypass traditional security. Learn from Microsoft and Salesloft breaches why behavioral monitoring matters.

June 23, 2026

by Igboanugo David Ugochukwu

CORE

· 1,819 Views

Data Governance Checklist for AI-Driven Systems

A practical checklist for evaluating AI data readiness, covering data quality, governance, lineage, access controls, retrieval systems, and ongoing monitoring.

June 23, 2026

by Abhishek Gupta

CORE

· 1,779 Views · 2 Likes

Testing Strategies for Web Development Code Generated by LLMs

LLMs can quickly generate web application code, but AI-written code may contain security vulnerabilities. This article reviews testing methods for LLM systems.

June 19, 2026

by Sandesh Basrur

· 2,539 Views · 1 Like

AI Is Finding Bugs Faster Than Enterprises Can Patch — Here's What Data Security Teams Should Do

Three structural shifts enterprise data security teams should make in 2026, based on verifiable data and a decade of experience building protection products.

June 18, 2026

by Priyanka Neelakrishnan

· 1,973 Views · 1 Like

Top Java Security Vulnerabilities and How to Prevent Them in Modern Java

Most Java security breaches stem from preventable coding mistakes. Follow secure coding practices, validate inputs, and keep dependencies updated to reduce risk.

June 18, 2026

by Muhammed Harris Kodavath

· 3,017 Views · 1 Like

OpenAPI, ORM, SVG, and Lottie

Learn about Codename One's latest release with OpenAPI code generation, SQLite ORM, SVG and Lottie support, deep links, and routing.

June 17, 2026

by Shai Almog

CORE

· 4,526 Views · 1 Like

The Real-Time Revolution: Why Blockchain Needs Data Stream Processing

Blockchain and data streaming are bringing unprecedented levels of security, transparency, and real-time mechanisms to move data across the digital world.

June 17, 2026

by Gautam Goswami

CORE

· 2,087 Views · 1 Like

The Trust Problem in Modern SaaS: Why Your Authentication Succeeded, and You Still Got Breached

Modern SaaS breaches often happen after successful authentication. Learn how trust drift, weak authorization, and stale tokens create hidden risks.

June 16, 2026

by Igboanugo David Ugochukwu

CORE

· 2,369 Views · 2 Likes

Conversational Risk Accumulation: Stateful Guardrails Beyond Single-Turn LLM Checks

Learn how Conversational Risk Accumulation (CRA) helps detect session-level risks in long AI chats using telemetry, drift tracking, and soft guardrails.

June 15, 2026

by Sanjay Mishra

· 2,229 Views

I Reverse-Engineered 50 API Breaches. The Same Five Mistakes Keep Appearing.

A cybersecurity and emerging tech correspondent analyzes 50 API breaches to reveal the five recurring mistakes behind major data exposures.

June 15, 2026

by Igboanugo David Ugochukwu

CORE

· 2,795 Views · 1 Like

Why Your AI Agent's Logs Aren't Earning Trust

What did the agent do? That’s a solved problem. Why did it do it? That’s not. Getting this right determines whether anyone trusts it with work that matters.

June 9, 2026

by Priyanka Kukreja

· 3,124 Views · 2 Likes

Minimus Expands Enterprise Security Platform with General Availability of Advanced Supply Chain Controls

Minimus, a pioneer in cloud vulnerability reduction, today introduced two major enterprise capabilities: Minimus Supply Chain Protection and minicli.

June 8, 2026

by Technology Wire

· 1,817 Views

Prompt Injection Is Real, So I Built a Python Firewall for LLM Pipelines

promptsanitizer is a Python firewall that cleans prompts, inputs, and outputs before risky text reaches or leaves an LLM.

June 5, 2026

by Sai Teja Erukude

· 5,734 Views · 1 Like

Compliance Automated Standard Solution (COMPASS), Part 11: Compliance as Code, the OSCAL MCP Server Way

How AI-native tooling is finally closing the loop between compliance personas and OSCAL artifacts with an MCP-standardized, AI-agent-ready interface.

June 4, 2026

by Yuji Watanabe

· 2,981 Views · 1 Like

Building Threat Intelligence Pipelines Using Python, APIs, and Elasticsearch

STIX/TAXII in, ECS normalized, provenance preserved deterministic IDs, correct bulk writes, ingest pipelines keep threat indicator data reliable and queryable under load.

June 3, 2026

by Krishnaveni Musku

· 3,385 Views

Identity in Action

A practical guide to SSO migration covering risks, MFA, phased rollout, and governance to ensure secure identity transitions without disruption.

June 3, 2026

by Kapil Chakravarthy Sanubala

· 3,372 Views · 5 Likes

The Latest Security Topics