Menu
View
Theme
Text size
The paper in your inbox every morning
Straight from the source · Guides by the people who build it

The Tech Gazette

Learn: Security

Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

Identity, secrets and safe systems.

5 steps to the basics

Start here

  1. OWASP Top 10OWASP · The web app risks that matter most.
  2. OWASP Top 10 for LLM applicationsOWASP · The same, for apps built on models.
  3. OWASP Cheat Sheet SeriesOWASP · Short answers for doing each thing safely.
  4. OAuth 2.0OAuth · How apps get permission without your password.
  5. SLSAOpenSSF · Levels for trusting the software you ship.

New for beginners

  1. MozillaOct 6, 2026
    Strengthen your online security for free with Firefox
  2. FastlyOct 6, 2026
    Back to Basics: Insecure Deserialization
  3. BoltOct 2, 2026
    7 AI App-Building Tips for Non-Developers (2026)
  4. AnacondaSep 29, 2026
    What Is MCP Security? A Practical Introduction
  5. ClerkSep 22, 2026
    Session management: What it is and why your security depends on its controls

Go deeper

  1. AWS Architecture BlogOct 13, 2026
    Stopping business email compromise with AI-driven email security: How VIPRE protects modern enterprises on AWS
  2. AWS DatabasesOct 12, 2026
    Understanding the differences between PgBouncer and Amazon RDS Proxy for PostgreSQL connection pooling
  3. AWS DatabasesOct 12, 2026
    Migrate CLR code to AWS Lambda when upgrading Amazon RDS for SQL Server to 2025
  4. Okta DeveloperOct 9, 2026
    Build a Secure TypeScript MCP Client with Cross App Access (XAA)
  5. Auth0Oct 9, 2026
    Multi-Tenant SaaS Apps with Auth0 Organizations — Part One
  6. CoreWeaveOct 8, 2026
    What Is ARIA, and How Did We Build It?
  7. Akamai Cloud (Linode)Oct 8, 2026
    Open Enrollment Is Where Digital Strategy Gets Tested. Are You Ready?
  8. FirebaseOct 8, 2026
    Building an iOS app in 6 hours with Firebase and Antigravity
  9. DatadogOct 7, 2026
    How we replaced our host vulnerability scanner with the Datadog Agent
  10. PyPIOct 6, 2026
    Securing PyPI accounts via Two-Factor Authentication
  11. AWS ContainersOct 6, 2026
    Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
  12. TwilioOct 6, 2026
    My Voice AI Demo Was Hit by a $982 Traffic-Pumping Attack! Here’s What I Learned
  13. AWS Networking & Content DeliveryOct 5, 2026
    Protect MCP Endpoints at the Edge with Amazon CloudFront and AWS WAF
  14. AWS Machine LearningOct 5, 2026
    Downgrading user roles in Amazon Quick
  15. GitLabOct 5, 2026
    Two front doors: Module-level access in a Django GRC app
  16. Auth0Oct 5, 2026
    Auth0 Metadata Explained: user_metadata vs app_metadata
  17. DatadogOct 5, 2026
    Process and route critical security logs to Exabeam with Observability Pipelines
  18. AWS Machine LearningOct 2, 2026
    Add secure Web Search to Claude Desktop with Amazon Bedrock AgentCore
  19. CoreWeaveOct 2, 2026
    Model Context Protocol in Action: When MCP Meets Real Infrastructure
  20. AWS Machine LearningOct 1, 2026
    Implementing Multi-Environment Access for Claude Platform on AWS
  21. Azure Cosmos DBOct 1, 2026
    Genspark protects live agent sessions with Azure Cosmos DB Global Secondary Indexes
  22. TemporalOct 1, 2026
    Camper: running security campaigns on Temporal
  23. WarpSep 30, 2026
    Terraform for agents: how we define our software factory in code
  24. Tigera (Calico)Sep 30, 2026
    Managing Claude Code Sessions Through Lynx
  25. Auth0Sep 30, 2026
    Seven Architectural Readiness Checks Before Production Launch
  26. AnacondaSep 29, 2026
    Build Your AI Dev Factory Your Way
  27. AWS Cloud OperationsSep 29, 2026
    From 2 AM alarm to answer: Security Triage with AWS DevOps Agent
  28. AWS DevOpsSep 29, 2026
    Building a Slack-powered AI development agent with Kiro CLI and headless authentication
  29. AWS DevOpsSep 29, 2026
    Accelerating development workflows with Kiro CLI as a Pre-Commit and Git Hook Agent
  30. CloudflareSep 29, 2026
    We tested our own WAF with frontier AI models. Here’s what we found
  31. HashiCorpSep 29, 2026
    Secure AI agents with HashiCorp Boundary
  32. Auth0Sep 29, 2026
    Integrating Claude Code with Auth0 APIs
  33. AWS DevOpsSep 28, 2026
    Audit trails for autonomous agents with AWS DevOps Agent
  34. SUSESep 28, 2026
    We Gave Our Agents Autonomy. Here’s How We Kept Control.
  35. Auth0Sep 28, 2026
    Securing Agentic Commerce Using Auth0 and the Universal Commerce Protocol (UCP)
  36. SUSESep 25, 2026
    From SAP data to operational insight: Modernizing Day-Two SAP operations with SUSE Trento
  37. Auth0Sep 25, 2026
    Stop Building MFA from Scratch (And What to Do Instead)
  38. Google CloudSep 24, 2026
    Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  39. AWS Machine LearningSep 23, 2026
    Use open weight models as your AI coding agent with Amazon Bedrock
  40. MongoDBSep 23, 2026
    Supporting a DPDPA-Compliant Ecosystem in India with MongoDB

Advanced

  1. AWS Machine LearningOct 13, 2026
    Natural language security queries at Orca Security using Amazon Bedrock
  2. AWS Machine LearningOct 8, 2026
    Share GPU clusters across teams with isolation and fairness using Amazon SageMaker HyperPod
  3. PyPIOct 6, 2026
    Security Audit Remediation: Warehouse
  4. PyPIOct 6, 2026
    Security Audit Remediation: cabotage
  5. eBPF FoundationOct 2, 2026
    Cloudflare’s eBPF Replatforming Part 4: Observability, Operations, and Reliability Improvements from eBPF
  6. Auth0Oct 2, 2026
    Architecting Secure Identity: Extending Auth0 PrivateLink with Intelligent Gateways
  7. Airbnb TechSep 29, 2026
    Personalization without user identity
  8. PerconaSep 29, 2026
    Valkey Memory Optimization, Version by Version and Encoding: How Many Bytes Did Each Release Actually Save?
  9. SUSESep 28, 2026
    Clearing the Vulnerability Backlog Safely: Agentic SecOps on SUSE AI Factory with the NVIDIA Open Agent Safety Platform
  10. Netflix TechBlogSep 25, 2026
    Trading a Cloud Identity for Your Own: Workload Attestation on Managed Compute
  11. SUSESep 25, 2026
    Securing SAP from the inside out: OS-level security for IT leaders
  12. CloudflareSep 24, 2026
    How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers
  13. NVIDIA DeveloperSep 23, 2026
    Manage Kubernetes Node Fleets with NodeWright
  14. Criteo EngineeringSep 23, 2026
    How Criteo Measures Bare-Metal Infrastructure Carbon
  15. RedpandaSep 22, 2026
    8 engineering lessons on running AI agents in production
  16. Salesforce EngineeringSep 16, 2026
    How Data 360 Builds Trusted Context: The Enduring Layer for Enterprise AI
  17. Trendyol TechSep 16, 2026
    We Automated Over 15,000 Security Reviews Without Letting AI Decide Everything
  18. Pinterest EngineeringSep 11, 2026
    Evolving Pinterest’s Embedding Retrieval Platform

Words to know

New research

  1. Language Is a Security Surface for Agent Guards
  2. SMT-Boosted Security Types and Correctness for Low-Level MPC
  3. BiShield-TEE: On the (In-)Security of Unilateral Weight Obfuscation in On-Device TEE-Shielded LLM Partition
  4. Matoi: Selective Revalidation of Consequence Evidence for Agent Authorization
  5. Evaluating and Improving Static Application Security Testing Tools for Rust

More in Security →