;
;

DZone Security Zone

Recent posts in Security on DZone.com

Running a Self-Hosted WAF in Production: Practical Lessons From SafeLine

Why Put a WAF in Front of the Application? Web application firewalls are often introduced as a list of security features: SQL injection protection,...
Posted on 20 October 2026 | 6:49 pm

GenAI Security Gateway: An End-to-End Architecture

LLMs are powerful application components, but they should not be exposed directly to untrusted users or unvetted documents. A request can contain a...
Posted on 19 October 2026 | 3:00 pm

Post-Quantum TLS for Cloud APIs and Microservices

Why Every TLS Termination Is a Separate Migration Boundary A cloud application rarely has one TLS connection. A single API request can be decrypted...
Posted on 16 October 2026 | 6:00 pm

How Much Signal Differential Privacy Takes From Your Dashboards, in Events

Somebody ships a differential privacy layer in front of the event store and leaves the dashboards sitting on top of it. The queries still return, t...
Posted on 15 October 2026 | 3:00 pm

Data Governance Is a Security Control, Not a Compliance Checkbox

I've spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture for bankin...
Posted on 14 October 2026 | 7:00 pm

Building a Scope-Constrained AI Agent for Automated CI Failure Repair

CI failures often expose a narrow defect through a broad stream of evidence such as compiler output, test reports, stack traces, changed files, dep...
Posted on 12 October 2026 | 7:00 pm

Putting Guardrails Around What Your AI Agent Is Allowed to Touch

This article is for platform engineers, data engineers, security architects, and AI application teams building enterprise agents that retrieve data...
Posted on 8 October 2026 | 3:00 pm

Nobody Designs an RBAC Mess; Everyone Ends Up With One

You're about to rename a column. Five minutes of work. Someone asks the obvious question first: who does this break? In a healthy Snowflake account...
Posted on 5 October 2026 | 4:00 pm

Building Enterprise File-Heavy AI Workflows: From Secure Uploads to Governed Document Intelligence

Enterprise AI is increasingly moving beyond clean, structured datasets and into the much larger world of documents, files, images, forms, emails, r...
Posted on 5 October 2026 | 2:30 pm

Gossips on Cryptography: Part 4

In this blog, we will continue our discussion from the previous parts. If you have not read them, please read them first. Parts 1 & 2 – Caesa...
Posted on 1 October 2026 | 5:00 pm

Are Passphrases Still Secure in the Age of AI?

The short answer up front: Yes, but only if the passphrase is genuinely random. Passphrases emerged as a direct response to a well-known problem wi...
Posted on 1 October 2026 | 2:00 pm

Your Cloud Diagram Is Already Out of Date: An Operating Model for Continuous Security Architecture

The Diagram-to-Deployment Gap Cloud security architecture often begins with a strong design, account boundaries are defined, identity federation an...
Posted on 1 October 2026 | 12:00 pm

The Silent Container Death: A TCP Dial That Never Times Out

A pod goes into CrashLoopBackOff. You pull the logs expecting a stack trace, a panic, an error string - anything that points you somewhere. Instead...
Posted on 30 September 2026 | 6:00 pm

Detection and Response Did Its Job. Now Someone Has to Actually Fix It.

A host is isolated. A malicious process is killed. A compromised credential is revoked before an attacker can use it again. Detection and response ...
Posted on 29 September 2026 | 6:00 pm

Locking Down the Enterprise: Data Security Patterns for AI Integrations

Every enterprise conversation about artificial intelligence eventually arrives at the same uncomfortable question: what happens to our data once it...
Posted on 25 September 2026 | 12:00 pm

Building a Secure MCP Server for File Processing: Auth, Rate Limiting, and Idempotency

Most write-ups on building an MCP server focus on the protocol itself: defining tools, handling requests, wiring up a client. That part is genuinel...
Posted on 22 September 2026 | 5:00 pm

How to Build a Production-Ready iOS App With AI-Generated Code

Vibe coding has compressed the distance between an idea and a runnable application. Natural-language instructions can now produce SwiftUI screens, ...
Posted on 21 September 2026 | 7:00 pm

Your Application Has an Unindexed Attack Surface. Do You Know What’s in It?

Security teams usually describe an application through the assets they know about. This includes the production domain, documented APIs, the servic...
Posted on 21 September 2026 | 4:00 pm

Data Governance for the Agentic Era

The modern enterprise generates and consumes unprecedented volumes of data across operational systems, customer interactions, partner ecosystems, c...
Posted on 14 September 2026 | 5:00 pm

A Firewall for AI Agents: Enforce Authority at Every Tool Call

The right firewall for an AI agent goes between the model and every tool that can cause a side effect. Not a prompt filter, an action firewall. An ...
Posted on 14 September 2026 | 1:00 pm