;
;

DZone Security Zone

Recent posts in Security on DZone.com

Nobody Designs an RBAC Mess; Everyone Ends Up With One

You're about to rename a column. Five minutes of work. Someone asks the obvious question first: who does this break? In a healthy Snowflake account...
Posted on 5 October 2026 | 4:00 pm

Building Enterprise File-Heavy AI Workflows: From Secure Uploads to Governed Document Intelligence

Enterprise AI is increasingly moving beyond clean, structured datasets and into the much larger world of documents, files, images, forms, emails, r...
Posted on 5 October 2026 | 2:30 pm

Gossips on Cryptography: Part 4

In this blog, we will continue our discussion from the previous parts. If you have not read them, please read them first. Parts 1 & 2 – Caesa...
Posted on 1 October 2026 | 5:00 pm

Are Passphrases Still Secure in the Age of AI?

The short answer up front: Yes, but only if the passphrase is genuinely random. Passphrases emerged as a direct response to a well-known problem wi...
Posted on 1 October 2026 | 2:00 pm

Your Cloud Diagram Is Already Out of Date: An Operating Model for Continuous Security Architecture

The Diagram-to-Deployment Gap Cloud security architecture often begins with a strong design, account boundaries are defined, identity federation an...
Posted on 1 October 2026 | 12:00 pm

The Silent Container Death: A TCP Dial That Never Times Out

A pod goes into CrashLoopBackOff. You pull the logs expecting a stack trace, a panic, an error string - anything that points you somewhere. Instead...
Posted on 30 September 2026 | 6:00 pm

Detection and Response Did Its Job. Now Someone Has to Actually Fix It.

A host is isolated. A malicious process is killed. A compromised credential is revoked before an attacker can use it again. Detection and response ...
Posted on 29 September 2026 | 6:00 pm

Locking Down the Enterprise: Data Security Patterns for AI Integrations

Every enterprise conversation about artificial intelligence eventually arrives at the same uncomfortable question: what happens to our data once it...
Posted on 25 September 2026 | 12:00 pm

Building a Secure MCP Server for File Processing: Auth, Rate Limiting, and Idempotency

Most write-ups on building an MCP server focus on the protocol itself: defining tools, handling requests, wiring up a client. That part is genuinel...
Posted on 22 September 2026 | 5:00 pm

How to Build a Production-Ready iOS App With AI-Generated Code

Vibe coding has compressed the distance between an idea and a runnable application. Natural-language instructions can now produce SwiftUI screens, ...
Posted on 21 September 2026 | 7:00 pm

Your Application Has an Unindexed Attack Surface. Do You Know What’s in It?

Security teams usually describe an application through the assets they know about. This includes the production domain, documented APIs, the servic...
Posted on 21 September 2026 | 4:00 pm

Data Governance for the Agentic Era

The modern enterprise generates and consumes unprecedented volumes of data across operational systems, customer interactions, partner ecosystems, c...
Posted on 14 September 2026 | 5:00 pm

A Firewall for AI Agents: Enforce Authority at Every Tool Call

The right firewall for an AI agent goes between the model and every tool that can cause a side effect. Not a prompt filter, an action firewall. An ...
Posted on 14 September 2026 | 1:00 pm

Why Continuous Application Security Testing Is No Longer Optional

Your last pentest is already out of date. The moment you shipped new code after that report, your risk profile changed, and nobody re-tested it.  T...
Posted on 11 September 2026 | 4:00 pm

Part 2: Securing and Scaling Goose-to-Java Agent Traffic With agentgateway

In Part 1 of this series, we built a Quarkus-based MCP tool server and connected it to the Goose AI agent over Streamable HTTP. The tools worked, t...
Posted on 9 September 2026 | 6:00 pm

Pipelines on Fire: Why Your CI/CD Tools Are the New Cyber Battlefield

Fifteen years in, and the conversation I have most often with security leads still starts the same way: how's your perimeter, how's your endpoint c...
Posted on 9 September 2026 | 5:00 pm

Your Email Security Is a DNS Configuration Problem

Every email authentication control you deploy is a DNS record. Not "backed by" DNS, not "uses" DNS. It is a DNS record, and when email security bre...
Posted on 8 September 2026 | 12:00 pm

The Bottleneck of Scaling

Any input/output operation, be it accessing a file, handling an HTTP request, or a database connection, is based on 3 fundamental system concepts —...
Posted on 3 September 2026 | 4:00 pm

Gossip on Cryptography: Part 3

In this blog, we will continue our discussion from the previous blog, Parts 1 and 2. If you have not read it, please read it once. So far, we have ...
Posted on 3 September 2026 | 1:00 pm

Beyond Agent-Washing: The Engineering Principles Behind Production-Ready AI Agents

An AI agent is not defined by how intelligently it talks. It's defined by what it's trusted to do. Give a language model a chat window, and you hav...
Posted on 2 September 2026 | 12:00 pm