A full VPN is not always necessary. In addition, VPN connections may be unavailable because of restrictions imposed by a local or national internet…
Tag: DZone Security Zone
How to Hide Sensitive Information Before You Share a File
You open the page, put your text or file in, press Transform , check the result, and download it. Private details such as email addresses, phone numbers,…
Spring Security JWT Validation Best Practices
A few months into a large-scale legacy-to-cloud migration for a Fortune 50 insurance carrier, I found something that had been sitting quietly in our…
Spring Security JWT Validation Best Practices
A few months into a large-scale legacy-to-cloud migration for a Fortune 50 insurance carrier, I found something that had been sitting quietly in our…
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
SSRF Prevention in C#: Securing File Imports From User-Supplied URLs
A document portal that accepts a URL saves users the trouble of downloading a file and uploading it again. That’s particularly useful when large, complex,…
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
SSRF Prevention in C#: Securing File Imports From User-Supplied URLs
A document portal that accepts a URL saves users the trouble of downloading a file and uploading it again. That’s particularly useful when large, complex,…
Running a Self-Hosted WAF in Production: Practical Lessons From SafeLine
Why Put a WAF in Front of the Application? Web application firewalls are often introduced as a list of security features: SQL injection protection,…
GenAI Security Gateway: An End-to-End Architecture
LLMs are powerful application components, but they should not be exposed directly to untrusted users or unvetted documents. A request can contain an…
Running a Self-Hosted WAF in Production: Practical Lessons From SafeLine
Why Put a WAF in Front of the Application? Web application firewalls are often introduced as a list of security features: SQL injection protection,…
GenAI Security Gateway: An End-to-End Architecture
LLMs are powerful application components, but they should not be exposed directly to untrusted users or unvetted documents. A request can contain an…
Post-Quantum TLS for Cloud APIs and Microservices
Why Every TLS Termination Is a Separate Migration Boundary A cloud application rarely has one TLS connection. A single API request can be decrypted and…
Data Governance Is a Security Control, Not a Compliance Checkbox
I’ve spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture for banking data…
How Much Signal Differential Privacy Takes From Your Dashboards, in Events
Somebody ships a differential privacy layer in front of the event store and leaves the dashboards sitting on top of it. The queries still return, the…
Data Governance Is a Security Control, Not a Compliance Checkbox
I’ve spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture for banking data…
Building a Scope-Constrained AI Agent for Automated CI Failure Repair
CI failures often expose a narrow defect through a broad stream of evidence such as compiler output, test reports, stack traces, changed files, dependency…