In this article, we will see how we can customize the authentication where user details are fetched from another component/service over HTTP. Store user details as Principal and use them later while creating tokens to customize the claims in JWT…
Category: DZone Security Zone
Data Governance Best Practices
In the digital age, data governance isn’t a luxury; it’s a necessity. From multinationals to fledgling startups, organizations are becoming increasingly data-centric. The myriad technologies at our disposal — SQL databases, NoSQL systems, REST APIs, GraphQL, and more — offer…
Better Smart Contract Security With Fine-Grained Permissions in Cadence
Flow is a permissionless layer-1 blockchain built to support the high-scale use cases of games, virtual worlds, and the digital assets that power them. The blockchain was created by the team behind Cryptokitties, Dapper Labs, and NBA Top Shot. One…
How To Fix SignTool Error
Are you running into this error message but can’t seem to get past it to digitally sign your code using a code-signing certificate? We’ll walk you through the troubleshooting solutions that’ll fix the Signtool ‘no certificates were found’ error in…
Data Integration in Multi-Cloud Environments: Strategies and Approaches
In today’s hyper-connected world, data is often likened to the new oil—a resource that powers modern businesses. As organizations expand their operational landscapes to leverage the unique capabilities offered by various cloud service providers, the concept of a multi-cloud strategy…
Bridging Agile and Continuous Data Management: A Synergetic Perspective
In the realm of software development, Agile methodologies have taken center stage for their ability to enable rapid and iterative progress. But what about continuous data management (CDM)? While often considered separate disciplines, closer examination reveals a symbiotic relationship that…
Harnessing GenAI: Building Cyber Resilience Against Offensive AI
Generative AI (GenAI) is revolutionizing the cybersecurity landscape, creating both new opportunities and fresh challenges. GenAI empowers users to create cyberattacks without traditional coding skills and automate malicious content creation, as evidenced by the LL Morpher virus crafted using ChatGPT. GenAI…
Developers’ Guide to Data Loss Prevention: Best Practices and Strategies
What Does Data Loss Prevention Do? Throughout 2023, a private research university discovered multiple breaches of its data. In August 2023, an American educational technology company found that millions of its users’ email addresses had been scrapped. In early October…
Infection Method: Domain Takeover
A domain takeover is a cyberattack when an attacker gains control of a domain name owned by another person or organization. This can have severe consequences as the attacker can use the domain for malicious purposes, such as spreading malware,…
Data Excellence Unveiled: Mastering Data Release Management With Best Practices
In today’s data-driven world, business enterprises extensively count on data warehouses to store, process, and analyze vast volumes of data. Thanks to data warehouses, the foundation of business intelligence and analytics, enterprises can make informed decisions and gain an edge…
Spring OAuth Server: Default Configuration
Spring has come out with an OAuth2 solution, and in this article, we will look at the default configuration that comes bundled with the spring-oauth server. Details about how OAuth2.0 works are out of the scope of this article and…
Advancing IoT Security: IoT Security Analytics Tools
The advent of the Internet of Things (IoT) has ushered in a new era of connectivity, revolutionizing various sectors, including homes, industries, and urban areas. However, this widespread connectivity also brings about significant security challenges, necessitating robust threat detection and…
AWS HIPAA Compliance Best Practices You Should Be Aware Of
Are you someone who is looking to ensure the data privacy and security of your healthcare data? Then you’ve come to the right place. In this article, we will dive deep into AWS HIPAA compliance and provide some of the…
IoT Security: Strategies, Challenges, and Essential Tools
The Internet of Things (IoT) has ushered in a new era of connectivity, transforming the way we live, work, and interact with our surroundings. It encompasses a vast network of devices, ranging from everyday appliances to industrial machinery, all connected…
Moving To Capability-Based Security With Flow: A Critical Evolution in Blockchain Security
Flow is a permissionless layer-1 blockchain built to support the high-scale use cases of games, virtual worlds, and the digital assets that power them. The blockchain was created by the team behind Cryptokitties, Dapper Labs, and NBA Top Shot. One…
Data Privacy and Its Impact on Management
In the modern digital epoch, the importance of data management can hardly be overstated. Data is no longer just an operational byproduct but the lifeblood of organizations, fueling everything from strategic decisions to customer interactions. However, in this race for…
How to Design and Implement Automated Security Workflows
Automated security workflows are transformative in today’s digital era. They streamline and enhance how one safeguards systems, using automation to manage manual tasks. With cyber threats on the rise, embracing modern security practices becomes vital. By adopting these innovative methods,…
Want To Build Successful Data Products? Start With Ingestion and Integration
In today’s world of fragmented, ever-increasing volumes of data, the need for real-time or near-real-time access to data is paramount. Data is your lifeline for improving business outcomes and depending on your organization’s business strategy. Plus, it can also be…
Implementing a Comprehensive ERP System Using SAFe®
The modern business landscape, resplendent in its technological evolution, underscores the indispensable role of Enterprise Resource Planning (ERP) systems. These systems, though monumental in their operational scope, offer the allure of a streamlined organization. However, the journey to a successful…
Yes, GitHub’s Copilot Can Leak (Real) Secrets
There has been a growing focus on the ethical and privacy concerns surrounding advanced language models like ChatGPT and OpenAI GPT technology. These concerns have raised important questions about the potential risks of using such models. However, it is not…