Security Resources

How to Protect Your AI Agents from Prompt Injection Attacks: An Active Defense Approach

Stop just blocking prompt injections. Learn how to use MIRAGE to trap AI agents in honeypots and force them to burn their own API tokens.

July 29, 2026

by Victoria Fonareva

· 3,497 Views · 1 Like

Engineering Production Agentic Systems: Part 2: The Guardrails

Learn how production AI agents use tool contracts, authorization scopes, audit trails, and risk-based human approval to safely take autonomous actions.

July 28, 2026

by Ram Ravishankar

· 2,458 Views · 1 Like

Designing Secure REST APIs With Spring Boot

Learn how to secure Spring Boot REST APIs with JWT validation, method-level authorization, input validation, rate limiting, CORS, secure logging, and more.

July 27, 2026

by Srivenkata Gantikota

· 8,495 Views · 2 Likes

Securing Model Context Protocol Servers: 4 Gates From Code to Production

Secure MCP servers against prompt injection, data leaks, and denial-of-wallet with four practical, OWASP-aligned gates from code to production. Runnable code.

July 24, 2026

by Viquar Khan

CORE

· 4,425 Views · 3 Likes

The Rise of Agentic SRE: Humans, Agents, and Reliability

Agentic SRE speeds up incident response, but it also requires clear guardrails, strong observability, and human oversight.

July 23, 2026

by Neel Shah

· 5,269 Views · 2 Likes

Why AI-Generated Code Fails Security Reviews 45% of the Time

AI coding tools produce security flaws in 45% of outputs, yet developers trust the code more despite no security gains in two years.

July 23, 2026

by sunil paidi

· 3,250 Views · 1 Like

Refresh Token Rotation in Node.js: Stopping Token Theft Without Logging Users Out

Implementing refresh token rotation with reuse detection, a pattern that limits the damage of a stolen token while keeping legitimate users logged in.

July 22, 2026

by Bilal Azam

· 4,190 Views · 1 Like

Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications

The latest MCP updates introduce security risks like protocol confusion. Quarkus mitigates these vectors using strict request filtering and enterprise security layers.

July 21, 2026

by Daniel Oh

CORE

· 3,738 Views · 1 Like

Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?

Root searches are cached and easy to access. Filtering forces requests to hit the backend database directly, triggering stricter anti-bot checks that block basic proxies.

July 21, 2026

by xiyun chen

· 2,699 Views · 1 Like

Scaling Row-Level Security With ABAC on Databricks Unity Catalog

Learn how to scale row-level security in Databricks Unity Catalog using a tag-driven ABAC pattern that reduces maintenance and simplifies onboarding.

July 20, 2026

by Sriram Vadlamani

· 2,844 Views · 1 Like

Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions

Circular RLS policy dependencies in PostgreSQL silently return no rows. Here is why it happens and how SECURITY DEFINER functions fix it.

July 20, 2026

by Lex Mulier

· 2,649 Views · 2 Likes

Security Is a Platform Property, Not a Pipeline Step

Security works best when it is built into the platform: Terraform guardrails, CI/CD checks, and golden path templates make secure delivery the default.

July 20, 2026

by Naveen Kalapala

· 2,749 Views · 1 Like

The Agent Security Split: Tool Layer vs Sandbox Layer

Why enterprise agent security requires decoupling the tool layer from the sandbox layer, and how the helmdeck + NVIDIA OpenShell architecture enforces it.

July 20, 2026

by Tosin Akinosho

· 2,037 Views · 1 Like

Every SOC Today Is Answering the Wrong Question

Rethink SOC architecture with Continuous Evidence Graphs that connect identities, sessions, and resources instead of relying on alert timelines.

July 17, 2026

by Igboanugo David Ugochukwu

CORE

· 3,311 Views · 1 Like

Your Agent Trusts That Wiki. Should It?

AI agents need more than execution correctness. Instruction provenance must be a first-class security property before privileged actions are trusted.

July 16, 2026

by Abhinav Srivastava

· 4,551 Views · 1 Like

12 Factor Framework for Building Secure and Compliant Cloud Applications

Learn how a practical 12-factor framework embeds security, compliance, resilience, and governance into cloud-native applications.

July 14, 2026

by Josephine Eskaline Joyce, Ph.D

CORE

· 3,436 Views · 4 Likes

Implementing Zero-Trust Networking and Identity for Microsoft Foundry Agents

This article explains how to implement a zero-trust security architecture for Microsoft Foundry agents by combining identity-first authentication.

July 13, 2026

by Jubin Soni, FBCS

CORE

· 4,977 Views · 2 Likes

Machine Identity Debt: Why Human Identity Is No Longer Cloud Security's Primary Boundary

Machine identities now outnumber human ones in cloud environments. Learn how to secure workloads with modern identity governance and trust.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 6,942 Views · 2 Likes

Goodbye, Skeleton Keys: Why Machine Identity Broke IAM, and What SPIFFE Is Doing About It

The Salesloft Drift breach showed why machine identity has outgrown IAM. Here’s how SPIFFE can reduce token sprawl and trust risk.

July 13, 2026

by Igboanugo David Ugochukwu

CORE

· 3,177 Views · 1 Like

AI Can't Defend What It Can't See

AI can only defend what it can see. Give it incomplete data, and it won't warn you. It quietly reports everything as healthy while real attacks slip through unseen.

July 7, 2026

by Jithu Paulose

· 2,663 Views · 3 Likes

The Latest Security Topics