Security Resources

IT practitioners get leaders to care about security by putting things in business (not technical) terms and using data to make their case.

October 8, 2024

by Leon Adato

· 3,836 Views · 1 Like

Security at the Onset: Stabilizing CSPM and DevSecOps

Proactively integrating CSPM with DevSecOps strengthens security by continuously monitoring and addressing vulnerabilities from development to deployment.

October 8, 2024

by Josephine Eskaline Joyce

CORE

· 5,494 Views · 4 Likes

Secret Management and Rotation

Learn about automating KMS key rotation for asymmetric keys to raise the security bar by replacing keys at an interval.

October 8, 2024

by Pranav Kumar Chaudhary

· 3,641 Views · 2 Likes

Integrate Spring Boot With jOOQ, Liquibase, and Testcontainers

Get started with jOOQ, Liquibase, and Testcontainers: Create a basic Spring Boot application and integrate the aforementioned techniques including a test setup.

October 7, 2024

by Gunter Rotsaert

CORE

· 4,870 Views · 1 Like

Enhanced API Security: Fine-Grained Access Control Using OPA and Kong Gateway

Kong secures APIs and OPA handles policy decisions. This custom plugin caches user data, minimizing database checks and ensuring fast, accurate access control.

October 4, 2024

by Amrutha Paladugu

· 4,717 Views · 4 Likes

Understanding the Dependency Injection Lifecycle: Singleton, Scoped, and Transient With Detailed Examples

This article will help you gain a solid understanding of the lifecycle of singleton, scoped, and transient services when implementing dependency injection.

October 3, 2024

by Rishi Mohan

· 4,993 Views · 5 Likes

Top 6 Cybersecurity Threat Detection Use Cases: How AI/ML Can Help Detect Advanced and Emerging Threats

Learn how to get started to design and build AI/ML solutions that are capable of revolutionizing the cybersecurity threat detection landscape.

October 2, 2024

by Mayank Singhi

· 2,988 Views · 2 Likes

AWS LetsEncrypt Lambda or Why I Wrote a Custom TLS Provider for AWS Using OpenTofu and Go

LetsEncrypt Lambda helps to manage TLS certificates. Compared to Certificate Manager it provides certs that can be used at non-only AWS services like EC2 Nginx.

October 2, 2024

by Alexander Sharov

· 6,516 Views · 2 Likes

Misconfiguration Madness: Thwarting Common Vulnerabilities in the Financial Sector

Financial services are among the most attacked sectors of any industry, making it critical that developers operate at the highest level to produce secure code.

October 2, 2024

by Matias Madou

· 3,455 Views · 1 Like

Workarounds for Oracle Restrictions on the Size of Expression Lists

Learn five strategies to workaround ORA-01795 and ORA-00913 errors and explore a comparative analysis of their performance.

October 1, 2024

by Thiago Nascimento

CORE

· 5,964 Views · 2 Likes

Using AWS WAF Efficiently to Secure Your CDN, Load Balancers, and API Servers

When securing your cloud architecture, performance and efficiency are incredibly important. Learn more about how to strike a fine balance.

October 1, 2024

by Manish Sinha

· 4,610 Views · 2 Likes

Guarding Kubernetes From the Threat Landscape: Effective Practices for Container Security

As organizations increasingly rely on Kubernetes for critical workloads, it is important to keep your containerized systems secure and understand threats they face.

October 1, 2024

by Gal Cohen

· 5,626 Views · 2 Likes

Network Sniffing: A Critical Concept in Network Security

Learn about network sniffing: what it is, how it works, and why it forms an important defense-in-depth security strategy.

September 30, 2024

by Deepak Antiya

· 3,586 Views · 2 Likes

Why Haven’t You Upgraded to HTTP/2?

Let’s understand more about the benefits of upgrading to HTTP/2 and how it can impact consumers of your application or service.

September 30, 2024

by John Vester

CORE

· 41,339 Views · 3 Likes

Is Spring AI Strong Enough for AI?

Explore Spring's capabilities within the AI domain, its potential integration with AI libraries, and its ability to effectively manage AI workflows.

September 27, 2024

by Reza Ganji

CORE

· 11,183 Views · 13 Likes

Building a Zero Trust API With ASP.NET Core: A Developer’s Guide

Secure your ASP.NET Core API with a Zero Trust model by authenticating every request, enforcing least privilege, and continuously monitoring to protect against threats.

September 25, 2024

by Aneesh Gopalakrishnan

· 4,695 Views · 4 Likes

Optimizing External Secrets Operator Traffic

Learn how to efficiently implement External Secrets Operator in your Kubernetes cluster to reap the benefits of External Secrets Management systems.

September 25, 2024

by Upasana Sharma

· 4,885 Views · 8 Likes

Exploring the Sidecar Pattern in Cloud-Native Architecture

Throughout this article, explore what the sidecar pattern offers, its use cases, and why it has become so widely used in cloud-native environments.

September 24, 2024

by Gaurav Gaur

CORE

· 4,789 Views · 5 Likes

Reducing Infrastructure Misconfigurations With IaC Security

IaC streamlines cloud management but brings security risks. Improve security with static code analysis and dynamic policy checks to mitigate misconfigurations.

September 23, 2024

by Siri Varma Vegiraju

· 3,944 Views · 2 Likes

10 Security Best Practices for SaaS

SaaS security encompasses a range of measures and protocols designed to protect sensitive data and ensure the safety of users within a SaaS environment.

September 23, 2024

by Alfonso Valdes

· 3,986 Views · 5 Likes

The Latest Security Topics