Today, applications are built around identity systems. All API gateways, microservices, mobile backends, and single sign-on flows require some form of…
Category: DZone Security Zone
5 Infrastructure Controls for Securing AI Agents
The Disturbing Discovery In July 2026, the AI Red Team at NVIDIA published findings of a six-month assessment review of enterprise AI agents, ranging from…
The AI Memory Security Blueprint
Designing Context Isolation, Retrieval Trust, and Vector Database Governance for Enterprise RAG Systems Part 1 — Five Documents Can Hijack a Frontier…
The Agent in Your Pipeline Doesn’t Have a Manager. That’s the Problem.
AI coding tools made developers faster. Nobody asked what happened when the tools started making decisions. I want to start with a question that most…
Uncover Security Risks in Your Agent Skills Before Deploying
This tutorial explains how to catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only…
We Empowered AI Agents With ‘Hands,’ Now We Require Kernel-Level Vision to Monitor Them
The cybersecurity industry has been looking at large language models (LLMs) for the past few years as a scary librarian who can be slightly dangerous. We…
Why AWS and Azure Handle Data Perimeter Differently
AWS can send audit logs to an attacker’s account unless denials are enforced at the network layer, while Azure doesn’t log network-block requests at all.…
The AI Memory Security Blueprint
Designing Context Isolation, Retrieval Trust, and Vector Database Governance for Enterprise RAG Systems Part 1 — Five Documents Can Hijack a Frontier…
The Agent in Your Pipeline Doesn’t Have a Manager. That’s the Problem.
AI coding tools made developers faster. Nobody asked what happened when the tools started making decisions. I want to start with a question that most…
Uncover Security Risks in Your Agent Skills Before Deploying
This tutorial explains how to catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only…
We Empowered AI Agents With ‘Hands,’ Now We Require Kernel-Level Vision to Monitor Them
The cybersecurity industry has been looking at large language models (LLMs) for the past few years as a scary librarian who can be slightly dangerous. We…
A Practical Pipeline for Identifying Sensitive Columns Before Test Data Masking
I work as a data analyst at a legal services company. Part of my work involves protecting sensitive data during the Test Data Management (TDM) process.…
Mastering Enterprise Security in Microsoft Power Platform
Citizen development was supposed to free up IT teams, not give them a new category of risk to manage. Yet that is precisely what has happened in many…
A Zero-Trust Implementation Framework for Cloud Migrations: Lessons From Enterprise Deployments
Cloud migration projects almost always treat security as a downstream concern something to bolt on after workloads have already moved, once the “real”…
Securing Branch Networks With Firewalls, VPNs, IDS/IPS, and Identity-Based Access
Branch networks no longer behave like quiet extensions of a single headquarters LAN. They terminate local user traffic, break out directly to the internet…
Performance Testing With JMeter Beyond the Basics: Distributed Load, Realistic Profiles, and Identifying Security Bottlenecks
Most JMeter test plans I’ve inherited share a common shape. Two hundred threads, one ramp-up, a flat plateau, and a results table that says “p95 was…
Why Enterprise AI Agents Fail: A Runtime Data Governance Pattern for Reliable Answers
The Failure You Have Probably Already Seen An enterprise AI agent is deployed against production data. It answers the first ten questions confidently and…
Securing Loop Engineering: Six Trust Boundaries for Autonomous Agents
Opening Scenario: The GitHub Issue That Reprograms the Loop Every morning, an automated system checks a repository’s open GitHub issues, decides which…
Retrieval Augmented Generation With Spring AI 2.0, Claude, and PGvector
Language models become much more useful when they can answer questions about information they were never trained on, including your internal…
How to Protect Your AI Agents from Prompt Injection Attacks: An Active Defense Approach
I’ve spent the past week locked in a room (figuratively, mostly) building a solution for a problem that’s been bugging me since the last AI security…