DZone Security Zone

BYOLM with Spring AI & MCP: Secure, Swappable AI Everywhere

Introduction Artificial intelligence has rapidly moved from research labs into everyday tools. Yet, most users remain locked into vendor‑controlled ecosystems, where the choice of …

Securing Verifiable Credentials With DPoP: A Spring Boot Implementation

In my previous article, I demonstrated how to implement OIDC4VCI (credential issuance) and OIDC4VP (credential presentation) using Spring Boot and an Android wallet. This follow-up…

5 Challenges and Solutions in Mobile App Testing

Testing is one of the final stages of mobile app development before you’re ready for launch. The finish line may seem close, but it might not be. If you encounter mobile app testin…

Security and Governance Patterns for Your Conversational AI

How many times have we heard people talk about the "dream of a SOC copilot?" A copilot woåuld allow an analyst to type something like, "Show me all the SSH login attempts for 10.0.…

Avoid BigQuery SQL Injection in Go With saferbq

You can build dynamic queries in BigQuery using the Go SDK. When building applications that allow users to select tables or datasets dynamically, you need to include those identifi…

DevSecOps as a Strategic Imperative for Modern DevOps

If you do not take security seriously, you are just begging for trouble. Security should be an integral part of your development process, not something that you add at the end. Pat…

Why the Future Is Increasingly Pointing Toward Multi-Cloud Strategies

It is not surprising that the explosion in cloud technology over the last several decades has brought about a transformational shift across industries. Organizations are relying mo…

Shift-Left Strategies for Cloud-Native and Serverless Architectures

The growth observed in modern-day cloud applications is staggering to say the least. Applications are being built faster and deployed at a faster pace. However, there can be severa…

The Architect's Guide to Logging

Every developer and architect thinks they understand logging until they’re staring at a production issue at 3:00 a.m. Realizing that their logs lack context, have no defined struct…

Penetration Testing Strategy: How to Make Your Tests Practical, Repeatable, and Risk-Reducing

Penetration testing — “pentesting” — still surprises teams. Some treat it as a checkbox before launch; others expect it to magically find every vulnerability. The truth sits in the…

Blockchain + AI Integration: The Architecture Nobody's Talking About

Walk into any tech conference today, and you'll hear buzzwords flying: AI this, blockchain that. But ask anyone about the actual architecture required to integrate these technologi…

A Practical Guide to Blocking Cyber Threats

As cyberthreats dominate the news headlines day after day, it is important for large multinational organizations and nonprofits to take immediate notice of such events. Nonprofits …