During the software development, builders face challenges between building a better product faster versus dealing with various responsibilities that come with software development. Getting security right is one of them. Due to the increased cyber attacks, organizations started focusing on…
Tag: DZone Security Zone
Why Generative AI Needs Human Oversight to Build Trust
In 2023, a generative AI-powered chatbot for a financial firm mistakenly gave investment advice that violated compliance regulations, triggering regulatory scrutiny. Around the same time, an AI-powered medical summary tool misrepresented patient conditions, raising serious ethical concerns. As businesses rapidly…
Safeguarding Sensitive Data: Content Detection Technologies in DLP
The 2024 IBM Cost of a Data Breach Report found that data breaches cost organizations an average of $4.88 million per incident globally. Many of these breaches were caused by accidental or intentional mishandling of sensitive information. As businesses rely…
Stop Exposing Secrets! Secure Your APIs in Postman Like a Pro
API security is crucial, as it directly impacts your business’s success and safety. How well you secure your APIs can make or mar your product, and it is of utmost importance to spend time thinking about security. I have seen…
AWS WAF Classic vs WAFV2: Features and Migration Considerations
Amazon Web Services Web Application Firewall (AWS WAF) protects web programs against widespread vulnerabilities including SQL injection and cross-scriptability. Amazon Web Services WAFV2, a new WAF Classic service, introduces with it increased agility, elasticity, and operational efficiency. In this article,…
The Role of DevSecOps in Securing Multi-Cloud Architectures
In this article, we will explore how DevSecOps transforms security in multi-cloud ecosystems. Starting with the DevSecOps phase, we will delve into how multi-cloud environments can be implemented effectively and safely. Additionally, we will examine the most significant challenges associated…
Ansible Security and Testing Tools for Automation
Automation has become the cornerstone of modern IT operations, enabling organizations to streamline processes, reduce manual errors, and improve efficiency. However, as automation grows in complexity and scale, security risks also increase. Misconfigured infrastructure, untested playbooks, and vulnerabilities in automation…
Security in the CI/CD Pipeline
As development cycles speed up, integrating security into the CI/CD pipeline is essential to embed security checks early and throughout the process to prevent vulnerabilities from creeping into production. This article delves deeper into the technical details, code examples, and…
A Comprehensive Guide to Protect Data, Models, and Users in the GenAI Era
Editor’s Note: The following is an article written for and published in DZone’s 2025 Trend Report, Generative AI: The Democratization of Intelligent Systems. Generative AI (GenAI) is transforming how organizations operate, enabling automation, content generation, and intelligent decision making at an…
Multi-Tenant .NET Applications With Keycloak Realms
Introduction Note: You can download the source from GitHub. I’ve been working on multi-tenant applications in the .NET ecosystem for quite a while, and one of the toughest challenges I consistently run into is secure tenant isolation — especially when…
More Efficient Software Development Means More Need for Devs
I think we need to be realistic when we talk about AI’s role in software development. It’s not “hit a button and generate code.” For me, it’s best positioned to maximize efficiency. It’s not just a tool for getting rid…
Patch Management in the Age of IoT: Challenges and Solutions
In a closely connected world, the Internet of Things (IoT) is already a familiar brand for people. However, the use of such many devices is likely to increase the risk of attack. This is why good patch management is so important.…
Tackling Multidomain Integration in Software Development
Multidomain integration is becoming a cornerstone of modern software development, bridging technologies like blockchain, biotech, and consumer applications. These cross-domain projects are no longer optional — they are the future of innovation. However, combining such diverse systems presents unique challenges. …
Bringing Security to Digital Product Design
One of the biggest problems in digital product development today is the failure to collaborate with InfoSec or DevSecOps teams. Unfortunately, threats are ubiquitous and increasingly sophisticated. But did you know that there is a way to reduce the time…
Secure File Transfer as a Critical Component for AI Success
Secure file transfer (SFT) has become one of the most crucial technologies in the modern Information technology (IT) landscape for ensuring data security and confidentiality. SFT is a hot topic in today’s world, especially when decisions are being made based…
Building Security into the Feature During the Design Phase
It is exciting how different disciplines can be merged to make the processes more efficient. In 2009, DevOps was coined to address the friction between the Development and Operations teams. As a result, the industry moved towards clubbing both teams…
Top Security Automation Tools for Auto-Remediation
Speed matters in cybersecurity. Responding to a potential threat in seconds rather than minutes can be the difference between a thwarted attack and a realized one. The problem is that human analysts — however capable they may be — often…
Stop Wasting Time Writing Code for APIs
API development should be about solving business problems, not repeating the same tedious tasks over and over again. Yet, for many developers, API creation is still bogged down by inefficiencies — from writing boilerplate code to manually managing integrations, security,…
5 Ways Docker Can Improve Security in Mobile App Development
Security is a critical concern in mobile app development, especially with the rise of data breaches and cyber threats. Docker, a platform for developing, shipping, and running applications in containers, offers several advantages that can enhance the security of mobile…
How to Deploy Karpenter on AWS Kubernetes With kOps
kOps is a widely used tool for deploying and managing Kubernetes clusters in multi-cloud or hybrid cloud environments. It provides a unified configuration system (YAML or JSON), which lets you easily set up clusters across AWS, GCP, Azure, and on-premises…