Category: DZone Security Zone

Understanding the Fundamentals of Cryptography

Cybersecurity encompasses multiple different domains, including network isolation, platform security and infrastructure security. However, one thing that we less frequently discuss, but use more than often is cryptography. Whether it’s HTTPS, data encryption in databases, disk encryption, or technologies like…

How Security Engineers Can Help Build a Strong Security Culture

In today’s fast-paced world, organizations face increasing cyber threats that can compromise their operational integrity, erode customer trust, and jeopardize financial stability. While it’s crucial to have advanced security technologies in place, many organizations overlook the importance of cultivating a…

Online Developer Tools a Backdoor to Security Threat

< div tabindex=”0″> Free Online Utilities May Not Be Safe Using online developer utilities, such as a JSON Viewer, can be incredibly convenient for parsing and visualizing JSON data, but they also come with significant risks. The tool, for instance,…

Secure IaC With a Shift-Left Approach

Imagine you’re building a skyscraper—not just quickly, but with precision. You rely on blueprints to make sure every beam and every bolt is exactly where it should be. That’s what Infrastructure as Code (IaC) is for today’s cloud-native organizations—a blueprint…

The Rise of Vibe Coding: Innovation at the Cost of Security

Software development teams and professionals are increasingly adopting vibe coding as their preferred approach. Vibe coding involves creating software through instinctual coding methods and minimal planning to achieve quick prototyping or making solutions work immediately. While vibe coding can spark…

Enhancing SQL Server Security With AI-Driven Anomaly Detection

As SQL Server databases become increasingly targeted by cybercriminals, it’s crucial to adopt proactive security measures. Traditional database security mechanisms, such as access controls, role-based permissions, and firewalls, are important but may not be sufficient to detect advanced threats or…

Security by Design: Building Full-Stack Applications With DevSecOps

Building a full-stack application with Angular (frontend) and Node.js (backend) demands a holistic security approach. Security by design means baking in security from the architecture stage and throughout development, rather than as an afterthought. DevSecOps extends DevOps by integrating security…

How GitHub Copilot Helps You Write More Secure Code

Early-career developers often struggle with secure coding practices. GitHub Copilot, an AI pair programmer, can assist in writing safer code when used wisely. However, guidance is key; a 2021 study found that approximately 40% of Copilot’s generated code had security…

A Guide to Auto-Tagging and Lineage Tracking With OpenMetadata

Tagging metadata and tracking SQL lineage manually is often tedious and prone to mistakes in data engineering. Although essential for compliance and data governance, these tasks usually involve lengthy manual checks of datasets, table structures, and SQL code.  Thankfully, advancements…

Detection and Mitigation of Lateral Movement in Cloud Networks

How Hackers Bypass Lateral Movement Detection (And How to Stop Them) Detecting lateral movement has emerged as a crucial cybersecurity challenge today. Attackers who breach network perimeters follow a five-step process. They start with reconnaissance, move to their original compromise,…

AI-Based Threat Detection in Cloud Security

Abstract This article explores how artificial intelligence (AI) is enhancing threat detection in cloud certificate environments. It explicates how dissimilar AI modeling, such as supervised, unsupervised, and reinforcement learning, is used to describe and respond to security measures and threats…

How Trustworthy Is Big Data?

Businesses and individual users now employ big data analysis to support decision-making, engineering innovation, and productivity levels. However, the surge in the reliance on big data leads to growing concerns regarding its accuracy and trustworthiness. Although big data provides unprecedented…

Building Enterprise-Ready Landing Zones: Beyond the Initial Setup

Introduction Cloud providers offer baseline landing zone frameworks, but successful implementation requires strategic customization tailored to an organization’s specific security, compliance, operations, and cost-management needs. Treating a landing zone as a turnkey solution can lead to security gaps and operational…

Unlocking the Potential of Apache Iceberg: A Comprehensive Analysis

Apache Iceberg has emerged as a pioneering open table format,  revolutionising data management by addressing big challenges. In this article, we’ll delve into Iceberg’s capabilities, discuss its limitations, and explore the implications for data architects. A Brief History Lesson: Hadoop’s…

Integrating Security as Code: A Necessity for DevSecOps

Security practices in DevOps have evolved from being a minor concern to one of the main focus points, which resulted in the DevSecOps movement. It’s about “shifting security to the left” in the software development lifecycle — so the security…

GDPR Compliance With .NET: Securing Data the Right Way

When developers hear the term GDPR, the initial reaction often involves stress and uncertainty, especially around how it might slow down development or degrade application performance. But here’s the truth: GDPR isn’t just another regulation to check off your list.…

The Transformative Power of Artificial Intelligence in Cloud Security

Cloud computing has reshaped how businesses operate, offering unmatched scalability, flexibility, and cost-efficiency. However, as organizations continue to shift critical operations to the cloud, they face escalating cybersecurity challenges. Traditional security systems often struggle to protect complex, interconnected cloud environments…

Why I Started Using Dependency Injection in Python

When I first started building real-world projects in Python, I was excited just to get things working. I had classes calling other classes, services spun up inside constructors, and everything somehow held together. But deep down, I knew something was…

Jira Restore And Disaster Recovery: Scenarios and Use Cases

It’s hard to imagine the company managing its projects without issue-tracking tools. For example, Jira has probably become one of the most popular project management software solutions for organized teams. According to Atlassian, over 180k customers in about 190 countries…

Overcoming MFA Test Automation Challenges

Multi-factor authentication (MFA) has become an essential tool for safeguarding sensitive systems. As businesses strive to comply with regulatory requirements, the integration of MFA into workflows is now standard practice. However, automating tests for MFA-enabled systems poses unique challenges for…

Your Ultimate Website QA Checklist

A detailed website QA checklist helps make sure every aspect of the website is tested, whether through manual or automated testing approaches. It usually covers parameters like functionality, performance, usability, security, and compatibility across various browsers and devices. By following…

Achieving Zero Trust and Air-Gapped IaC in IBM Cloud With Schematics

As modern enterprises continue their journey toward cloud-native infrastructure, security and automation aren’t just nice to have; they’re absolutely essential. Particularly in regulated industries like finance, government, and healthcare, there’s a growing need to deploy Infrastructure as Code (IaC) within…

Understanding ldd: The Linux Dynamic Dependency Explorer

In the world of Linux system administration and software development, understanding how executables interact with shared libraries is crucial. Enter ldd (List Dynamic Dependencies), a powerful command-line utility that helps you peer into the complex web of library dependencies that…

AI Protection: Securing The New Attack Frontier

We’re amidst a paradigm shift in society where many product verticals are being reimagined through an ‘AI-first’ architecture. An AI-first architecture is one where much of the core business logic is driven by AI, and the product is architected to…

Seamless Security Integration Strategies in Software Development

During the software development, builders face challenges between building a better product faster versus dealing with various responsibilities that come with software development. Getting security right is one of them. Due to the increased cyber attacks, organizations started focusing on…

Why Generative AI Needs Human Oversight to Build Trust

In 2023, a generative AI-powered chatbot for a financial firm mistakenly gave investment advice that violated compliance regulations, triggering regulatory scrutiny. Around the same time, an AI-powered medical summary tool misrepresented patient conditions, raising serious ethical concerns. As businesses rapidly…

AWS WAF Classic vs WAFV2: Features and Migration Considerations

Amazon Web Services Web Application Firewall (AWS WAF) protects web programs against widespread vulnerabilities including SQL injection and cross-scriptability. Amazon Web Services WAFV2, a new WAF Classic service, introduces with it increased agility, elasticity, and operational efficiency.  In this article,…

The Role of DevSecOps in Securing Multi-Cloud Architectures

In this article, we will explore how DevSecOps transforms security in multi-cloud ecosystems. Starting with the DevSecOps phase, we will delve into how multi-cloud environments can be implemented effectively and safely. Additionally, we will examine the most significant challenges associated…

Ansible Security and Testing Tools for Automation

Automation has become the cornerstone of modern IT operations, enabling organizations to streamline processes, reduce manual errors, and improve efficiency. However, as automation grows in complexity and scale, security risks also increase. Misconfigured infrastructure, untested playbooks, and vulnerabilities in automation…

Security in the CI/CD Pipeline

As development cycles speed up, integrating security into the CI/CD pipeline is essential to embed security checks early and throughout the process to prevent vulnerabilities from creeping into production. This article delves deeper into the technical details, code examples, and…

Multi-Tenant .NET Applications With Keycloak Realms

Introduction Note: You can download the source from GitHub. I’ve been working on multi-tenant applications in the .NET ecosystem for quite a while, and one of the toughest challenges I consistently run into is secure tenant isolation — especially when…

Tackling Multidomain Integration in Software Development

Multidomain integration is becoming a cornerstone of modern software development, bridging technologies like blockchain, biotech, and consumer applications. These cross-domain projects are no longer optional — they are the future of innovation. However, combining such diverse systems presents unique challenges. …

Bringing Security to Digital Product Design

One of the biggest problems in digital product development today is the failure to collaborate with InfoSec or DevSecOps teams. Unfortunately, threats are ubiquitous and increasingly sophisticated. But did you know that there is a way to reduce the time…

Top Security Automation Tools for Auto-Remediation

Speed matters in cybersecurity. Responding to a potential threat in seconds rather than minutes can be the difference between a thwarted attack and a realized one. The problem is that human analysts — however capable they may be — often…

Stop Wasting Time Writing Code for APIs

API development should be about solving business problems, not repeating the same tedious tasks over and over again. Yet, for many developers, API creation is still bogged down by inefficiencies — from writing boilerplate code to manually managing integrations, security,…

5 Ways Docker Can Improve Security in Mobile App Development

Security is a critical concern in mobile app development, especially with the rise of data breaches and cyber threats. Docker, a platform for developing, shipping, and running applications in containers, offers several advantages that can enhance the security of mobile…

How to Deploy Karpenter on AWS Kubernetes With kOps

kOps is a widely used tool for deploying and managing Kubernetes clusters in multi-cloud or hybrid cloud environments. It provides a unified configuration system (YAML or JSON), which lets you easily set up clusters across AWS, GCP, Azure, and on-premises…

Generative AI Agents: Transforming Supply Chain Management

Supply chains are the backbone of global commerce, but they’re increasingly complex and vulnerable to disruptions. From pandemic-related shortages to geopolitical conflicts, recent events have exposed fundamental weaknesses in traditional supply chain management approaches.  As organizations seek more resilient and…

Real-Time Fraud Detection Using AI and Machine Learning

Problem Statement With the rapid increase of online applications in industries such as finance, e-commerce, and social media, the frequency and sophistication of fraud attempts have surged. E-commerce apps face challenges like unauthorized transactions, fake bank account creation, and bot-driven…

A Glimpse Into the Future for Developers and Leaders

Software development is on the cusp of major transformations, driven by new technologies and an ever-growing demand for faster, more efficient, and scalable systems. For developers and leaders in software engineering, staying ahead of these trends will be essential to…

How Explainable AI Is Building Trust in Everyday Products

AI is the potential ally of the common people because it becomes an integral part of our daily lives. From personalized shopping suggestions to curated music playlists, along with other AI systems, they continuously accentuate our adventures.  Nevertheless, as these…

KIAM vs AWS IAM Roles for Service Accounts (IRSA)

As Kubernetes adoption grows in cloud-native environments, securely managing AWS IAM roles within Kubernetes clusters has become a critical aspect of infrastructure management. KIAM and AWS IAM Roles for Service Accounts (IRSA) are two popular approaches to handling this requirement. …

Zero-Trust Infinite Security: Masking’s Powerful New Ally

Escalating data breach risks and intensifying regulatory guidelines have put organizations’ readiness for privacy protection into the spotlight. Until now, obscuring data sets via different methods of masking has been the anchor, but rising uncertainty around the nature of attacks…

Psychological Safety as a Competitive Edge

Psychological safety isn’t about fluffy “niceness” — it is the foundation of agile teams that innovate, adapt, and deliver. When teams fearlessly debate ideas, admit mistakes, challenge norms, and find ways to make progress, they can outperform most competitors. Yet,…

STRIDE: A Guide to Threat Modeling and Secure Implementation

Threat modeling is often perceived as an intimidating exercise reserved for security experts. However, this perception is misleading. Threat modeling is designed to help envision a system or application from an attacker’s perspective. Developers can also adopt this approach to…

Networking in DevOps: Your Beginner Guide

Hey there! I’m Rocky, the face behind CodeLivly, where I share all things tech, code, and innovation. Today, I want to talk about something super important for anyone diving into the world of DevOps: networking. Networking might sound a bit…

Identity and Access Management Solution to Safeguard LLMs

In the era of artificial intelligence, the use of large language models (LLMs) is increasing rapidly. These models offer amazing opportunities but also introduce new privacy and security challenges. One of the essential security measures to address these challenges involves…

A Platform-Agnostic Approach in Cloud Security

Companies are now turning to data as one of the most important assets in their businesses, and data engineers are in the midst of managing and improving this asset and its effectiveness. In addition, the integration of data engineering with…

PostgreSQL 12 End of Life: What to Know and How to Prepare

Amazon Aurora PostgreSQL-compatible edition major version 12.x and Amazon RDS for PostgreSQL 12 reach the end of standard support on February 28, 2025. Higher database versions introduce new features, enhancing operational efficiency and cost-effectiveness.  Identifying qualified databases and upgrading them…

AI-Powered Ransomware Attacks

The improvement of artificial brainpower (artificial intelligence) has improved many fields, including digital protection. Notwithstanding, this mechanical improvement is a two-sided deal. While computerized reasoning brings many advantages, it also empowers cybercriminals to send off progressively complex and disastrous assaults. …

Non-Human Identity Security in the Age of AI

It is not a coincidence that non-human identities (NHIs) have come into focus recently while AI-powered tools and autonomous agents are rapidly being adopted. In fact, this is partially what is driving the explosion of NHIs in the enterprise. This…

Protecting Critical Infrastructure From Ransomware

Safeguarding critical infrastructure from ransomware has become a critical issue in today’s interconnected world. Regions, for instance, power clinical benefits and government face extending perils that could disturb supplies, impact fragile data, and cause essential financial and reputational hurt.  Ransomware…