Zero Trust, explained without the buzzwords
"Zero Trust" might be the most abused phrase in security. Every vendor slaps it on a box and charges you extra for it. Let me strip the marketing of…
Open Source
⚑ Report a ProblemLatest Open Source news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Ephemeral credentials for databases: moving past the shared application account
Ephemeral credentials for databases: moving past the shared application account A shared database account is a familiar design. An application reads…
Cyber Resilience Implementation Guide: Zero Trust, AI Security and Ransomware Recovery
Cyber resilience has become a board-level operating capability, not a security slogan. The old goal was to prevent every incident. The realistic goa…
Building Enterprise SaaS Features: Audit Logs, Role-Based Access Control, and SSO
Introduction & Industry Context For product-led growth (PLG) startups and scaling mid-market Software-as-a-Service (SaaS) providers, moving upma…
Extending Zero Trust to Your Agents' Memory
Assume the agent is compromised. Then decide where its memory lives. I ended a piece two weeks ago with a claim: a catalog is where governed agent m…
Protecting a personal web app with Cloudflare Access and email OTP
This article is an English translation of the original Japanese article. I deployed a personal task management app to Cloudflare Workers, but I did…
Architecting Zero Trust for Enterprise AI Pipelines
Enterprise AI will never be truly secure if Zero Trust stops at the network boundary. It must extend across the entire AI pipeline, from data ingest…
Beyond the Playbook: Architecting Defenses Against Autonomous AI Threats
Beyond the Playbook: Architecting Defenses Against Autonomous AI Threats We used to build security systems assuming the attacker was human. That ass…
Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end
Part 1 of this series, [[Entra-Extensibility-Is-Control-Plane]], made the case that every Microsoft Entra extension point hands a piece of the Entra…
Microsoft Entra extensibility is a gift. It is also Control Plane.
Microsoft Entra is the Zero Trust policy enforcement engine sitting at the intersection of identities, endpoints, AI agents, networks and data. Ever…
How to Secure Local LLM Model Files: A Zero Trust Guide
When you download a model file for your homelab, you aren't just grabbing data; you are importing an untrusted dependency with execution privileges.…