https://techgazette.com.br/learn/security/ New guides on security, by the people who build it. Identity, secrets and safe systems. en 180 Tue, 13 Oct 2026 16:03:00 GMT https://aws.amazon.com/blogs/machine-learning/natural-language-security-queries-at-orca-security-using-amazon-bedrock/ https://aws.amazon.com/blogs/machine-learning/natural-language-security-queries-at-orca-security-using-amazon-bedrock/ Tue, 13 Oct 2026 16:03:00 GMT AWS Machine Learning Security AWS Machine Learning — Orca Security built Discovery AI, a natural language query agent on Amazon Bedrock that converts plain-English questions into Sonar queries. The post shares the multi-stage architecture and the results: 90% lower query c… https://aws.amazon.com/blogs/architecture/stopping-business-email-compromise-with-ai-driven-email-security-how-vipre-protects-modern-enterprises-on-aws/ https://aws.amazon.com/blogs/architecture/stopping-business-email-compromise-with-ai-driven-email-security-how-vipre-protects-modern-enterprises-on-aws/ Tue, 13 Oct 2026 14:32:00 GMT AWS Architecture Blog Security AWS Architecture Blog — Learn how VIPRE Security built an AI-powered email security solution on AWS to stop business email compromise. VIPRE Integrated Email Security uses machine learning and a serverless architecture on Amazon ECS, Amazon SQS… https://aws.amazon.com/blogs/database/understanding-the-differences-between-pgbouncer-and-amazon-rds-proxy-for-postgresql-connection-pooling/ https://aws.amazon.com/blogs/database/understanding-the-differences-between-pgbouncer-and-amazon-rds-proxy-for-postgresql-connection-pooling/ Mon, 12 Oct 2026 16:14:00 GMT AWS Databases Security AWS Databases — Compare Amazon RDS Proxy and PgBouncer for PostgreSQL connection pooling on AWS. This post explains how each pooler handles pooling modes, authentication, failover, and session-state pinning, and gives you a framework to… https://aws.amazon.com/blogs/database/migrate-clr-code-to-aws-lambda-when-upgrading-amazon-rds-for-sql-server-to-2025/ https://aws.amazon.com/blogs/database/migrate-clr-code-to-aws-lambda-when-upgrading-amazon-rds-for-sql-server-to-2025/ Mon, 12 Oct 2026 16:11:00 GMT AWS Databases Security AWS Databases — After upgrading Amazon RDS for SQL Server to 2017 or later, CLR strict security leaves user-defined CLR assemblies unusable. This post shows how to migrate CLR logic with no native T-SQL equivalent to an AWS Lambda funct… https://developer.okta.com/blog/2026/10/09/typescript-mcp-sdk-cross-app-access https://developer.okta.com/blog/2026/10/09/typescript-mcp-sdk-cross-app-access Fri, 09 Oct 2026 05:00:00 GMT Okta Developer Security Okta Developer — Enterprise apps rarely work alone. Imagine this scenario: HR wants to ensure that a new employee completes their new hire onboarding, and they want this verification in the company’s HR app so it’s tied to the employee’s… https://auth0.com/blog/multi-tenant-saas-apps-with-auth0-organizations-part-one/ https://auth0.com/blog/multi-tenant-saas-apps-with-auth0-organizations-part-one/ Fri, 09 Oct 2026 00:00:00 GMT Auth0 Security Auth0 — If you are building a B2B SaaS product multi-tenancy is a foundational requirement. Your customers are companies, and each company expects its own isolated space. Getting this right early saves enormous pain later. https://wf.coreweave.com/blog/what-is-aria-and-how-did-we-build-it https://wf.coreweave.com/blog/what-is-aria-and-how-did-we-build-it Thu, 08 Oct 2026 19:32:00 GMT CoreWeave Security CoreWeave — Putting an agent next to your experiments was the easy part. The real work was making its research outlast the chat without taking authority from the researcher. https://aws.amazon.com/blogs/machine-learning/share-gpu-clusters-across-teams-with-isolation-and-fairness-using-amazon-sagemaker-hyperpod/ https://aws.amazon.com/blogs/machine-learning/share-gpu-clusters-across-teams-with-isolation-and-fairness-using-amazon-sagemaker-hyperpod/ Thu, 08 Oct 2026 16:20:00 GMT AWS Machine Learning Security AWS Machine Learning — A reference architecture for securely sharing one Amazon SageMaker HyperPod EKS cluster across multiple teams, using AWS IAM Identity Center for authentication, per-team SageMaker Domains and Kubernetes namespaces for is… https://www.akamai.com/blog/security/2026/oct/open-enrollment-digital-strategy-tested-are-you-ready https://www.akamai.com/blog/security/2026/oct/open-enrollment-digital-strategy-tested-are-you-ready Thu, 08 Oct 2026 13:00:00 GMT Akamai Cloud (Linode) Security Akamai Cloud (Linode) — Open enrollment puts payer infrastructure, security, APIs, and member experiences under pressure. Learn six ways that health plans can prepare from edge to core. https://firebase.blog/posts/2026/09/build-ios-app-firebase-antigravity https://firebase.blog/posts/2026/09/build-ios-app-firebase-antigravity Thu, 08 Oct 2026 00:00:00 GMT Firebase Security Firebase — We built a production-ready iOS app with Firebase, including authentication, Firestore, Cloud Messaging, Cloud Functions and App Check, in just six hours using Google's Antigravity coding agent. https://www.datadoghq.com/blog/how-we-replaced-our-host-vulnerability-scanner-with-the-datadog-agent/ https://www.datadoghq.com/blog/how-we-replaced-our-host-vulnerability-scanner-with-the-datadog-agent/ Wed, 07 Oct 2026 00:00:00 GMT Datadog Security Datadog — Learn how Datadog evaluated Agent-based host vulnerability scanning, compared detection results, and preserved coverage and audit reporting during the migration. https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2fa/ https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2fa/ Tue, 06 Oct 2026 21:31:00 GMT PyPI Security PyPI — One of the key security promises that PyPI makes is that when you're downloading something, that only the people associated with that project are going to be able to upload, delete, or otherwise modify a project. That wh… https://blog.pypi.org/posts/2023-11-14-2-security-audit-remediation-warehouse/ https://blog.pypi.org/posts/2023-11-14-2-security-audit-remediation-warehouse/ Tue, 06 Oct 2026 21:31:00 GMT PyPI Security PyPI — This is part two in a three-part series. See part one here, and part three here. This post is a deeper dive into the remediation of the security audit findings for the Warehouse - the main codebase for PyPI.org. The audi… https://blog.pypi.org/posts/2023-11-14-3-security-audit-remediation-cabotage/ https://blog.pypi.org/posts/2023-11-14-3-security-audit-remediation-cabotage/ Tue, 06 Oct 2026 21:31:00 GMT PyPI Security PyPI — This is part three in a three-part series. See part one here, and part two here. This post is a deeper dive into the remediation of the security audit findings for cabotage - the codebase that deploys PyPI and its suppor… https://blog.mozilla.org/en/firefox/free-firefox-cybersecurity-features/ https://blog.mozilla.org/en/firefox/free-firefox-cybersecurity-features/ Tue, 06 Oct 2026 16:00:00 GMT Mozilla Security Mozilla — Every October, Cybersecurity Awareness Month reminds us the importance of protecting our digital lives. The theme for 2026 is ‘Don’t Make It Easy for Them,’ with the National Cybersecurity Alliance (NCA) and the Cybersec… https://aws.amazon.com/blogs/containers/migrating-from-nginx-ingress-to-alb-handling-oauth2-proxy/ https://aws.amazon.com/blogs/containers/migrating-from-nginx-ingress-to-alb-handling-oauth2-proxy/ Tue, 06 Oct 2026 15:54:00 GMT AWS Containers Security AWS Containers — The NGINX Ingress Controller is retired. If you run oauth2-proxy with NGINX for OpenID Connect authentication, switching to the AWS Load Balancer Controller can silently break your auth. This post shows two ways to keep… https://www.fastly.com/blog/back-to-basics-insecure-deserialization/ https://www.fastly.com/blog/back-to-basics-insecure-deserialization/ Tue, 06 Oct 2026 00:00:00 GMT Fastly Security Fastly — Learn what insecure deserialization is, how attackers exploit it, and how to prevent attacks using secure coding best practices and the Fastly Next-Gen WAF. https://www.twilio.com/en-us/blog/developers/best-practices/secure-voice-agent-demos https://www.twilio.com/en-us/blog/developers/best-practices/secure-voice-agent-demos Tue, 06 Oct 2026 00:00:00 GMT Twilio Security Twilio — See how a $982 voice AI toll fraud attack happened to my Twilio Voice demo and learn measures to secure a voice app. Understand patterns, preventive controls, more. https://aws.amazon.com/blogs/networking-and-content-delivery/protect-mcp-endpoints-at-the-edge-with-amazon-cloudfront-and-aws-waf/ https://aws.amazon.com/blogs/networking-and-content-delivery/protect-mcp-endpoints-at-the-edge-with-amazon-cloudfront-and-aws-waf/ Mon, 05 Oct 2026 18:25:00 GMT AWS Networking & Content Delivery Security AWS Networking & Content Delivery — AWS WAF gives you a practical way to secure and observe Model Context Protocol (MCP) endpoints at the edge. MCP has quickly become the standard way AI agents communicate to tools and data. Originally, it was a stateful p… https://aws.amazon.com/blogs/machine-learning/downgrading-user-roles-in-amazon-quick/ https://aws.amazon.com/blogs/machine-learning/downgrading-user-roles-in-amazon-quick/ Mon, 05 Oct 2026 15:51:00 GMT AWS Machine Learning Security AWS Machine Learning — Amazon Quick doesn't offer a direct console path to downgrade a user from Admin or Author to Reader. This post walks through two reliable methods: a manual delete-and-recreate approach and an AWS CLI step-down sequence t… https://about.gitlab.com/blog/module-level-access-in-a-django-grc-app/ https://about.gitlab.com/blog/module-level-access-in-a-django-grc-app/ Mon, 05 Oct 2026 00:00:00 GMT GitLab Security GitLab — GitLab's engineering team builds a lot of our own internal tooling, but one platform in particular forced us to rethink how we handle authorization: our internal GRC tool that serves two very different customer bases und… https://auth0.com/blog/user-metadata-vs-app-metadata/ https://auth0.com/blog/user-metadata-vs-app-metadata/ Mon, 05 Oct 2026 00:00:00 GMT Auth0 Security Auth0 — user_metadata and app_metadata aren't interchangeable. Users can edit one, not the other. Learn how this distinction becomes a security boundary in your post-login Actions. https://www.datadoghq.com/blog/observability-pipelines-exabeam-packs/ https://www.datadoghq.com/blog/observability-pipelines-exabeam-packs/ Mon, 05 Oct 2026 00:00:00 GMT Datadog Security Datadog — Learn how Observability Pipelines Packs reduce security log volume before data reaches Exabeam while preserving parser compatibility. https://ebpf.io/blog/cloudflare-replatforming-4 https://ebpf.io/blog/cloudflare-replatforming-4 Fri, 02 Oct 2026 17:00:00 GMT eBPF Foundation Security eBPF Foundation — The fourth instalment chronicling Cloudflare’s journey with eBPF, looking at how eBPF improved observability, incident response, and fleet security. https://aws.amazon.com/blogs/machine-learning/add-secure-web-search-to-claude-desktop-with-amazon-bedrock-agentcore/ https://aws.amazon.com/blogs/machine-learning/add-secure-web-search-to-claude-desktop-with-amazon-bedrock-agentcore/ Fri, 02 Oct 2026 15:46:00 GMT AWS Machine Learning Security AWS Machine Learning — Claude Desktop on Amazon Bedrock is limited to the model's knowledge cutoff without web search. In this post, we walk through connecting Claude Desktop to Web Search using Amazon Bedrock AgentCore Gateway, with JWT-based… https://wf.coreweave.com/blog/model-context-protocol-in-action https://wf.coreweave.com/blog/model-context-protocol-in-action Fri, 02 Oct 2026 14:12:00 GMT CoreWeave Security CoreWeave — What happens when Model Context Protocol meets real infrastructure? Explore an end-to-end Kubernetes workflow, from authentication to deployment to verification, on CoreWeave. https://bolt.new/blog/ai-app-building-tips-non-developers https://bolt.new/blog/ai-app-building-tips-non-developers Fri, 02 Oct 2026 00:00:00 GMT Bolt Security Bolt — Seven habits developers use to keep apps from breaking, and the Bolt.new feature for each: checkpoints, copies, locked files, secrets, and backups. https://auth0.com/blog/extending-auth0-privatelink-with-intelligent-gateways/ https://auth0.com/blog/extending-auth0-privatelink-with-intelligent-gateways/ Fri, 02 Oct 2026 00:00:00 GMT Auth0 Security Auth0 — Route Auth0 Outbound PrivateLink traffic across multiple isolated VPCs from a single secure tunnel — using an API Gateway as a fan-out layer with Auth0 Actions for context-based routing. https://aws.amazon.com/blogs/machine-learning/implementing-multi-environment-access-for-claude-platform-on-aws/ https://aws.amazon.com/blogs/machine-learning/implementing-multi-environment-access-for-claude-platform-on-aws/ Thu, 01 Oct 2026 16:32:00 GMT AWS Machine Learning Security AWS Machine Learning — Learn how to configure secure, multi-environment access to Claude Platform on AWS from a single subscription: cross-account SigV4 for AWS workloads, workspace-scoped API keys for developers, and OIDC federation for exter… https://devblogs.microsoft.com/cosmosdb/genspark-protects-live-agent-sessions-with-azure-cosmos-db-global-secondary-indexes/ https://devblogs.microsoft.com/cosmosdb/genspark-protects-live-agent-sessions-with-azure-cosmos-db-global-secondary-indexes/ Thu, 01 Oct 2026 16:00:00 GMT Azure Cosmos DB Security Azure Cosmos DB — This article was authored by Justin Liu, co-founder and chief architect, Genspark. The work does not end when the prompt does A user comes to Genspark with a goal: research a market, build a presentation, produce a repor… https://temporal.io/blog/camper-running-security-campaigns-on-temporal https://temporal.io/blog/camper-running-security-campaigns-on-temporal Thu, 01 Oct 2026 00:00:00 GMT Temporal Security Temporal — See how Temporal uses Camper to orchestrate security campaigns across repositories, connecting findings, fixes, reviews, retries, and campaign state. https://www.warp.dev/blog/software-factory-as-code https://www.warp.dev/blog/software-factory-as-code Wed, 30 Sep 2026 16:00:00 GMT Warp Security Warp — We define every agent in our software factory as code: orchestration, secrets, MCP servers, automations, runners, scorers, and benchmarks. Here’s a walkthrough of each part of the factory config. https://www.tigera.io/blog/managing-claude-code-sessions-through-lynx/ https://www.tigera.io/blog/managing-claude-code-sessions-through-lynx/ Wed, 30 Sep 2026 15:00:00 GMT Tigera (Calico) Security Tigera (Calico) — At Tigera, we spend a lot of time thinking about agent security: identity, policy, runtime controls, and the record left behind after an agent acts. Coding agents create an interesting problem because, in most organizati… https://auth0.com/blog/seven-architectural-readiness-checks-before-production-launch/ https://auth0.com/blog/seven-architectural-readiness-checks-before-production-launch/ Wed, 30 Sep 2026 00:00:00 GMT Auth0 Security Auth0 — Ensure your identity pipeline is production-ready, eliminate onboarding friction, and scale your application smoothly with Auth0 self-service plans. https://www.anaconda.com/blog/build-ai-dev-factory-your-way https://www.anaconda.com/blog/build-ai-dev-factory-your-way Tue, 29 Sep 2026 20:58:00 GMT Anaconda Security Anaconda — Learn how an AI Dev Factory turns a fragmented AI stack into a repeatable, secure system for building, testing, delivering, and operating AI at scale. The post Build Your AI Dev Factory Your Way appeared first on Anacond… https://medium.com/airbnb-engineering/personalization-without-user-identity-8e7891a1d486?source=rss----53c7c27702d5---4 https://medium.com/airbnb-engineering/personalization-without-user-identity-8e7891a1d486?source=rss----53c7c27702d5---4 Tue, 29 Sep 2026 17:01:00 GMT Airbnb Tech Security Airbnb Tech — How Airbnb uses proximity signals to personalize without relying on individual user history. By: Wei Jiang, Bin Xu, Bharathi Thangamani, Weiwei Guo, Sundar Srinivasavaradhan, Tracy Yu, Huiji Gao, Swapnil Ghike, Michael K… https://www.anaconda.com/blog/what-is-mcp-security https://www.anaconda.com/blog/what-is-mcp-security Tue, 29 Sep 2026 16:56:00 GMT Anaconda Security Anaconda — MCP connects AI agents to external tools and data, but the protocol leaves key protections optional. Learn what MCP security means and how to secure it. The post What Is MCP Security? A Practical Introduction appeared fi… https://aws.amazon.com/blogs/mt/from-2-am-alarm-to-answer-security-triage-with-aws-devops-agent/ https://aws.amazon.com/blogs/mt/from-2-am-alarm-to-answer-security-triage-with-aws-devops-agent/ Tue, 29 Sep 2026 16:11:00 GMT AWS Cloud Operations Security AWS Cloud Operations — Security incident triage usually starts cold. An Amazon CloudWatch alarm fires at 2 a.m. because an AWS Identity and Access Management (IAM) access key just created another access key. The responder spends the first 30 m… https://aws.amazon.com/blogs/devops/building-a-slack-powered-ai-development-agent-with-kiro-cli-and-headless-authentication/ https://aws.amazon.com/blogs/devops/building-a-slack-powered-ai-development-agent-with-kiro-cli-and-headless-authentication/ Tue, 29 Sep 2026 16:02:00 GMT AWS DevOps Security AWS DevOps — Every code review discussion, incident response thread, and standup happens in Slack. But when an engineer needs to analyze a service or debug a failing test, they leave Slack, open a terminal, navigate to the repository… https://aws.amazon.com/blogs/devops/accelerating-development-workflows-with-kiro-cli-as-a-pre-commit-and-git-hook-agent/ https://aws.amazon.com/blogs/devops/accelerating-development-workflows-with-kiro-cli-as-a-pre-commit-and-git-hook-agent/ Tue, 29 Sep 2026 15:59:00 GMT AWS DevOps Security AWS DevOps — Code review feedback is most valuable when it arrives early. A security vulnerability caught in a pull request saves hours. The same vulnerability caught in production costs days. But what if you could catch it before th… https://www.percona.com/blog/valkey-memory-optimization/ https://www.percona.com/blog/valkey-memory-optimization/ Tue, 29 Sep 2026 15:33:00 GMT Percona Security Percona — Introduction This RAM/Memory reduction is most useful for Valkey 9.1 environments that are key string heavy. They are used extensively in caching, sessions/authentication, real-time apps, ecomm, Ad tech/martech, and gami… https://blog.cloudflare.com/adaptive-ai-waf-testing/ https://blog.cloudflare.com/adaptive-ai-waf-testing/ Tue, 29 Sep 2026 13:00:00 GMT Cloudflare Security Cloudflare — We built a WAF tester that adapted each request based on what the WAF blocked or passed. This helped us explore variations that a fixed test might miss. We ran it across six attack categories on an authorized staging env… https://www.hashicorp.com/blog/secure-ai-agents-with-hashicorp-boundary https://www.hashicorp.com/blog/secure-ai-agents-with-hashicorp-boundary Tue, 29 Sep 2026 07:00:00 GMT HashiCorp Security HashiCorp — Enable AI agents to securely access your resources while operating within enterprise identity, access, and audit controls. https://auth0.com/blog/integrating-claude-code-with-auth0-apis/ https://auth0.com/blog/integrating-claude-code-with-auth0-apis/ Tue, 29 Sep 2026 00:00:00 GMT Auth0 Security Auth0 — Pair Claude Code with the Auth0 MCP Server to audit JWT configs, scaffold M2M apps, and refactor auth code from the terminal — with scoped access and security guardrails. https://aws.amazon.com/blogs/devops/audit-trails-for-autonomous-agents-with-aws-devops-agent/ https://aws.amazon.com/blogs/devops/audit-trails-for-autonomous-agents-with-aws-devops-agent/ Mon, 28 Sep 2026 16:07:00 GMT AWS DevOps Security AWS DevOps — AWS DevOps Agent investigates production incidents and proposes or applies fixes on your behalf, raising two questions for every operation and security review: what did the agent do, and how do you understand its impact?… https://www.suse.com/c/we-gave-our-agents-autonomy-heres-how-we-kept-control/ https://www.suse.com/c/we-gave-our-agents-autonomy-heres-how-we-kept-control/ Mon, 28 Sep 2026 09:00:00 GMT SUSE Security SUSE — Co-authored by Stacey Miller & Troy Mangum Key Takeaways The problem: Agents have demonstrated their ability to escape lab environments and access unauthorized systems. Prompt and model safeguards guide behavior; infrast… https://www.suse.com/c/agentic-secops-on-suse-ai-factory-with-nvidia-agent-safety-platform/ https://www.suse.com/c/agentic-secops-on-suse-ai-factory-with-nvidia-agent-safety-platform/ Mon, 28 Sep 2026 09:00:00 GMT SUSE Security SUSE — Scan a mid-sized container estate and you get back somewhere north of four thousand findings. Maybe thirty matter. The rest are unreachable code paths, packages that aren’t installed at runtime, images nobody has deploye… https://auth0.com/blog/securing-agentic-commerce-using-auth0-universal-commerce-protocol-ucp/ https://auth0.com/blog/securing-agentic-commerce-using-auth0-universal-commerce-protocol-ucp/ Mon, 28 Sep 2026 00:00:00 GMT Auth0 Security Auth0 — Explore how the UCP and Auth0 enable secure agentic commerce, allowing retail brands to safely transact through AI agents. https://netflixtechblog.com/trading-a-cloud-identity-for-your-own-workload-attestation-on-managed-compute-516d5a29b252?source=rss----2615bd06b42e---4 https://netflixtechblog.com/trading-a-cloud-identity-for-your-own-workload-attestation-on-managed-compute-516d5a29b252?source=rss----2615bd06b42e---4 Fri, 25 Sep 2026 16:01:00 GMT Netflix TechBlog Security Netflix TechBlog — By Dhruv Pratap Introduction Organizations that have been around for a while usually run two identity systems side by side. One belongs to the cloud provider: IAM roles, instance profiles, execution roles. The other is y… https://www.suse.com/c/from-sap-data-to-operational-insight-modernizing-day-two-sap-operations-with-suse-trento/ https://www.suse.com/c/from-sap-data-to-operational-insight-modernizing-day-two-sap-operations-with-suse-trento/ Fri, 25 Sep 2026 06:24:00 GMT SUSE Security SUSE — Key takeaways: Day-Two Operations are critical for maintaining SAP environment health, security and configuration consistency. SUSE Trento automates discovery, prevents configuration drift and standardizes high-risk admi…