# sensitive data Published articles for sensitive data. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Native Splunk brings real-time insights to Cisco Nexus One DevFeed: [Native Splunk brings real-time insights to Cisco Nexus One]() Original publisher: [Read original article]() Author: David Keith Published: 2026-09-16T15:00:59Z Content type: release Language: en Sources: [Cisco Blogs]() Topics: [Nexus Dashboard](), [observability](), [telemetry](), [datacenter](), [Security](), [sensitive data](), [audit](), [configuration]() Tags: [analytics](), [audit](), [cisco](), [cisco-nexus-dashboard](), [configuration](), [data-center](), [data-center-networking](), [network](), [nexus-one](), [observability](), [real-time](), [sensitive-data](), [splunk](), [troubleshooting]() ### AI overview Cisco describes native Splunk embedded in Cisco Nexus Dashboard as an on-premises analytics and observability capability for data center and AI workloads. It processes telemetry locally, correlates network, security, configuration, and audit data, and provides dashboards, searches, and alerts for troubleshooting, data sovereignty, compliance, and cost efficiency. ### Source excerpt Discover how native Splunk embedded in Cisco Nexus Dashboard delivers real-time analytics, faster troubleshooting, and on-premises data sovereignty for modern data center and AI workloads. ## Atomic macOS (AMOS) Stealer Activity DevFeed: [Atomic macOS (AMOS) Stealer Activity]() Original publisher: [Read original article]() Author: Bradley Duncan Published: 2026-09-16T10:00:06Z Content type: article Language: en Sources: [Unit 42]() Topics: [Malware](), [Aeternum](), [macOS](), [sensitive data](), [Zsh](), [ClickFix](), [cURL]() Tags: [ads](), [clickfix](), [credentials](), [cryptocurrency](), [curl](), [general](), [insights](), [macos](), [malware](), [sensitive-data](), [threat-intelligence](), [unit-42](), [zsh]() ### AI overview This article analyzes a laboratory-generated Atomic macOS (AMOS) stealer infection observed on Aug. 5, 2026. It describes a deceptive macOS toolkit installation page that led users to paste a command into Terminal, retrieving a Zsh script containing an encoded compressed payload and a follow-up script designed to run a Mach-O binary. AMOS targets macOS and can exfiltrate system information, login credentials, and sensitive data from applications including browsers and cryptocurrency wallets. ### Source excerpt Modern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block these threats. The post Atomic macOS (AMOS) Stealer Activity appeared first on Unit 42. ## How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team DevFeed: [How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team]() Original publisher: [Read original article]() Author: Alex Tray Published: 2026-09-15T21:03:09Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [data loss prevention](), [Development](), [Access Control](), [data]() Tags: [access-control](), [cybersecurity](), [cybersecurityawareness](), [data-loss-prevention](), [data-protection](), [database](), [development](), [encryption](), [endpoint-security](), [hardcoded-credentials](), [it-security](), [net-conf](), [remote-access](), [secrets](), [sensitive-data](), [web-development]() ### AI overview A tutorial for development teams on building endpoint data loss prevention strategies. It covers auditing laptops for secrets and sensitive data, removing unnecessary copies, rotating exposed credentials, and establishing access controls. ### Source excerpt A developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f ## FIPS 140-2 vs FIPS 140-3, Explained DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [fips 140-3](), [FIPS validation](), [Cryptography](), [Encryption](), [certificates](), [Security](), [Cloud]() Tags: [certificates](), [cloud](), [cmvp](), [cryptography](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [security](), [sensitive-data]() ### AI overview This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026. ### Source excerpt Understand key changes from FIPS 140-2 to FIPS 140-3. ## Progressive Authentication for Production-Ready RAG Architectures DevFeed: [Progressive Authentication for Production-Ready RAG Architectures]() Original publisher: [Read original article]() Author: Aishwarya Murali Padikkal Published: 2026-09-08T07:16:00Z Content type: article Language: en Sources: [Data Science at Microsoft]() Topics: [Authentication](), [Retrieval Augmented Generation (RAG)](), [sensitive data](), [User Experience](), [Security]() Tags: [ai](), [ai-agent](), [authentication](), [data-science](), [privacy](), [rag](), [retrieval](), [sensitive-data](), [user-experience]() ### AI overview The article presents progressive authentication for RAG systems: answer public questions without sign-in, then authenticate within the conversation when a request requires access to sensitive personal data. It argues that static, upfront authentication does not fit conversations that shift between public and private contexts. ### Source excerpt Designing a production-ready RAG architecture where authentication becomes part of the conversation, not a prerequisite for it. By Aishwarya Murali Padikkal & Priyank Solanki From understanding to retrieval, grounding, and response, authentication enters only when the conversation requires access to sensitive data- illustrating the core idea of progressive authentication. Illustration generated using ChatGPT and refined by the authors. Two questions, one help line Imagine two taxpayers opening the same AI-powered tax assistant. The first asks, "When is the filing deadline this year?" The second asks, "What was my refund last year?" Both questions are valid. Both deserve fast, helpful answers. Yet they represent fundamentally different types of requests. Figure 1. The same assistant, two different journeys. Requests are routed according to the type of information being accessed. Illustration generated by AI (ChatGPT) and refined by the authors. The answer to the first lives in a public handbook. Anyone should be able to access it instantly- no sign-in, no friction. The answer to the second is within an individual's private tax records. Before revealing a single detail, the assistant must be certain it is interacting with the right person. Making public information instantly accessible while ensuring private information is revealed only to the right person, all within the same conversation, is the challenge we set out to solve. It is also where conventional RAG systems quietly fall apart. Traditional RAG architectures assume a much simpler interaction model: a user asks a question, the system retrieves relevant documents, and the model generates an answer. Authentication, if it exists at all, is treated as a one-time checkpoint at the start of the interaction. Real conversations are far less predictable. Users naturally shift contexts, starting with a public question, moving to a personal one, and then asking follow-up questions that rely on both. The conversation evo ## From one switch to a control panel: meet \`dataCollection\` DevFeed: [From one switch to a control panel: meet \`dataCollection\`]() Original publisher: [Read original article]() Author: Sigrid Huemer Published: 2026-08-28T09:00:00Z Content type: release Language: en Sources: [Sentry Blog]() Topics: [SDKs](), [data](), [JavaScript](), [sensitive data](), [Release notes](), [passwords]() Tags: [api-keys](), [data](), [javascript](), [passwords](), [release-notes](), [sdks](), [sensitive-data]() ### AI overview Sentry is replacing the all-or-nothing `sendDefaultPii` setting with `dataCollection`, which provides granular control over automatically collected data such as user information, headers, request bodies, and GenAI data. The change is rolling out across Sentry SDKs, with JavaScript SDK v11 making it the default and collecting more data than v10 by default. ### Source excerpt Sentry SDKs replace the `sendDefaultPii` boolean with `dataCollection`, granular options for user data, headers, bodies, GenAI data, and more. ## How to evaluate session replay software: a developer's guide DevFeed: [How to evaluate session replay software: a developer's guide]() Original publisher: [Read original article]() Author: Lindsay Piper Published: 2026-08-26T09:00:00Z Content type: tutorial Language: en Sources: [Sentry Blog]() Topics: [session replay](), [Playback](), [sensitive data](), [debugging](), [Mobile]() Tags: [debug](), [debugging](), [developer](), [engineering](), [guide](), [libraries](), [monitoring](), [mutation](), [playback](), [privacy](), [sdk](), [sensitive-data](), [session-replay](), [tool](), [ux]() ### AI overview A developer guide to evaluating session replay software by comparing recording methods, privacy architecture, error-monitoring integration, overhead, AI debugging compatibility, and mobile support. It distinguishes UX analytics tools from developer debugging tools and explains the tradeoffs between DOM snapshot recording and pixel capture. ### Source excerpt Compare session replay tools on recording methodology, privacy architecture, integration depth, overhead, AI-readability, and mobile support ## Migrating to Auth0 for Startups from Another Auth Solution DevFeed: [Migrating to Auth0 for Startups from Another Auth Solution]() Original publisher: [Read original article]() Author: Shreya Gupta Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Auth0 Blog]() Topics: [Auth0](), [Security](), [sensitive data]() Tags: [auth0](), [security](), [sensitive-data](), [startups]() ### AI overview An interview with Evenpay's CTO describes the startup's migration from another authentication provider to Auth0 after Finnish customers required EU data residency controls and compliance configuration. The article discusses securing sensitive salary data and says the customer migration took a few weeks with support materials and AI assistance. ### Source excerpt Interviewing Evenpay on building trust from day one. ## Multi-Tenant AI Agents: Why Data Isolation Starts at the Database DevFeed: [Multi-Tenant AI Agents: Why Data Isolation Starts at the Database]() Original publisher: [Read original article]() Author: Quentin Packard Published: 2026-08-11T00:00:00Z Content type: article Language: en Sources: [Cockroach Labs]() Topics: [AI Agent](), [Multi-tenancy](), [Security](), [Software as a service](), [Database](), [Architecture & Design]() Tags: [agents](), [ai](), [ai-agents](), [architecture](), [database](), [prompt-injection](), [saas](), [security](), [sensitive-data]() ### AI overview The article argues that multi-tenant AI agent security requires database-level tenant isolation in addition to prompt safety and API-layer filtering. It explains that agents can act on improperly accessed data through downstream systems, APIs, and tool calls, expanding the potential impact of a tenant-boundary failure. ### Source excerpt Most SaaS teams shipping agentic features focus on prompt safety and API-layer filtering. But effective AI agent security also depends on... ## How to Use GitHub Actions to Deploy to Kubernetes Without Shared Secrets DevFeed: [How to Use GitHub Actions to Deploy to Kubernetes Without Shared Secrets]() Original publisher: [Read original article]() Author: info@goteleport.com (Noah Stride) Published: 2026-08-05T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [GitHub Actions](), [Kubernetes](), [Security](), [sensitive data](), [Vulnerabilities]() Tags: [ci-cd](), [github](), [github-actions](), [how-to](), [kubernetes](), [secrets](), [security](), [sensitive-data]() ### AI overview This tutorial explains how to use Teleport and GitHub Actions to deploy applications to Kubernetes without shared, long-lived credentials. It covers short-lived identities, Kubernetes RBAC, Teleport roles, and join tokens, and discusses extending the approach to database connections and internal APIs. ### Source excerpt Learn how use GitHub Actions to deploy to Kubernetes using short-lived, verifiable identities. ## Lambda-powered functions land in OTTL DevFeed: [Lambda-powered functions land in OTTL]() Original publisher: [Read original article]() Author: OpenTelemetry Authors; Docs CC BY Published: 2026-07-22T20:04:49Z Content type: release Language: en Sources: [Blog on OpenTelemetry]() Topics: [OpenTelemetry](), [telemetry](), [sensitive data](), [data]() Tags: [collection-operations](), [experimental](), [functions](), [lambda](), [opentelemetry](), [pipelines](), [release](), [sensitive-data](), [telemetry](), [transformation]() ### AI overview OpenTelemetry Collector Contrib v0.157.0 introduces lambda expressions to OTTL, enabling reusable inline logic in generic higher-order functions. The release adds eight experimental functions for collection transformations, including filtering, mapping, finding, reducing, and conditional operations. ### Source excerpt As telemetry pipelines become more sophisticated, so do the transformations they need to perform: sanitizing sensitive data, normalizing inconsistent schemas, and enforcing attribute contracts. While OTTL provides a rich set of transformation functions, expressing collection operations has required dedicated functions with hardcoded behavior for each new use case. OpenTelemetry Collector Contrib v0.157.0 changes that by introducing lambda expressions to OTTL. Lambdas let users pass inline logic directly to generic higher-order functions, making complex collection transformations both reusable and concise. The release includes eight new functions that leverage this capability: Filter, MapEach, MapKeys, Any, All, Find, Reduce, and When. ## Kan een Amerikaans bedrijf met encryptie de Amerikaanse overheid buiten de deur houden? DevFeed: [Kan een Amerikaans bedrijf met encryptie de Amerikaanse overheid buiten de deur houden?]() Original publisher: [Read original article]() Published: 2026-07-21T13:20:00Z Content type: opinion Language: nl Sources: [Bert Hubert's writings]() Topics: [Encryption](), [sensitive data](), [Microsoft](), [servers](), [Malware]() Tags: [encryption](), [microsoft](), [requirements](), [sensitive-data](), [server]() ### AI overview This Dutch commentary examines whether encryption can prevent the United States from accessing data held or processed by partly American companies. It argues that services such as Microsoft Double Key Encryption are difficult to use for ordinary data because servers need access to plaintext for searching and other operations, and that administrators ultimately retain significant control over server data. ### Source excerpt Het is inmiddels duidelijk dat zelfs maar deels Amerikaanse bedrijven met allerhande middelen gedwongen kunnen worden om onze data te overhandigen aan de Amerikaanse overheid. Ook kan de dienstverlening gestaakt worden na een enkel briefje op Whitehouse.gov, wat zonder enige rechterlijke toetsing geplaatst kan worden. Tegen deze beide dingen is met papier niets te doen. Geen speciale afspraak zal je redden uit dit probleem (dit ook volgens de Landsadvocaat). Maar, er is dan soms nog de hoop om de data nog wel privé te houden met speciale encryptie. ## Securing Heroku CLI Credentials with System Keychain Storage DevFeed: [Securing Heroku CLI Credentials with System Keychain Storage]() Original publisher: [Read original article]() Author: Katy Bowman Published: 2026-07-01T21:11:54Z Content type: release Language: en Sources: [Heroku]() Topics: [Heroku](), [Authentication](), [Command-line interface](), [Security](), [sensitive data]() Tags: [authentication](), [cli](), [compatibility](), [credentials](), [engineering](), [heroku](), [linux](), [macos](), [security](), [sensitive-data](), [storage](), [windows]() ### AI overview Heroku CLI version 11.8.0 makes system keychain storage the default for authentication credentials. The credential manager uses native secure storage on macOS, Linux, and Windows while preserving netrc compatibility and file-based fallback options. ### Source excerpt Beginning in version 11.8.0, we will be improving the security of the Heroku CLI by storing authentication credentials in your system keychain by default. The Heroku credential manager makes use of OS-native secure storage tools with interfaces designed for sensitive data while maintaining compatibility with existing developer workflows. We began the transition to our new [...] The post Securing Heroku CLI Credentials with System Keychain Storage appeared first on Heroku. ## How XY builds an AI agent orchestration platform for healthcare with Temporal DevFeed: [How XY builds an AI agent orchestration platform for healthcare with Temporal]() Original publisher: [Read original article]() Author: The XY Engineering Team Published: 2026-04-23T00:00:00Z Content type: article Language: en Sources: [Temporal Blog]() Topics: [agent orchestration](), [AI Agent](), [Orchestration](), [reliability](), [human review](), [sensitive data](), [Structured-data](), [YAML]() Tags: [agent](), [agent-orchestration](), [ai](), [ai-agent](), [automation](), [how-to](), [human-review](), [long-running](), [orchestration](), [reliability](), [sensitive-data](), [temporal](), [workflow]() ### AI overview XY describes using Temporal as a DSL-driven execution engine for an AI agent orchestration platform serving complex healthcare workflows. The approach uses a YAML-based workflow language and a generic Temporal workflow class to coordinate multiple systems, reliability features, human review, and sensitive healthcare data from prototype to production. ### Source excerpt One generic Temporal workflow class can provide infinite healthcare automation. See how XY built a DSL-driven AI agent orchestration platform that scales from prototype to production. ## Managing Sensitive Data in jOOQ 3.21+ Logs DevFeed: [Managing Sensitive Data in jOOQ 3.21+ Logs]() Original publisher: [Read original article]() Author: lukaseder Published: 2026-03-27T12:45:19Z Content type: tutorial Language: en Sources: [jOOQ]() Topics: [Logging](), [sensitive data](), [Security](), [configuration](), [Code]() Tags: [configuration](), [csv](), [debug-logging](), [jooq](), [jooq-in-use](), [json](), [logging](), [logs](), [maven](), [redacted-columns](), [security](), [sensitive-data](), [xml]() ### AI overview This article explains how jOOQ debug logging can expose query bind values and fetched records in application logs, creating security concerns in production. It describes a code-generation configuration available in commercial jOOQ distributions to mask exported data, including text, HTML, and optionally CSV, JSON, or XML output. ### Source excerpt One of jOOQ's most popular feature is the out-of-the-box debug logging experience. jOOQ developers find this feature very useful when developing their applications. Assuming you run a jOOQ query and configure your logger to print DEBUG log output: When this query is executed, your log output might contain something like this: Executing query : select ... Continue reading Managing Sensitive Data in jOOQ 3.21+ Logs -> ## Keeping sponsor lists up-to-date DevFeed: [Keeping sponsor lists up-to-date]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2026-03-25T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Tool](), [GitHub](), [GitHub Actions](), [Go Language](), [configuration](), [Template](), [sensitive data]() Tags: [commit](), [configuration](), [github](), [github-actions](), [go](), [scheduled](), [sensitive-data](), [template]() ### AI overview The article introduces a Go tool that automates updating sponsor lists across README files and websites. It fetches sponsors from GitHub Sponsors and OpenCollective, renders content with Go templates, supports shared configuration and remote templates, and can run daily through GitHub Actions with automatic commits. ### Source excerpt Keeping sponsor lists up-to-date across multiple READMEs and websites is tedious - so I wrote a tool to automate it. ## Scaling Payments in the Age of Real-Time Fraud: Building a Resilient Foundation for Fintech DevFeed: [Scaling Payments in the Age of Real-Time Fraud: Building a Resilient Foundation for Fintech]() Original publisher: [Read original article]() Author: Becca Weng Published: 2026-02-25T00:00:00Z Content type: article Language: en Sources: [Cockroach Labs]() Topics: [systems](), [Architecture & Design](), [Resilience](), [Availability](), [consistency](), [Low Latency](), [data]() Tags: [fintech](), [high-availability](), [latency](), [outages](), [payments](), [pci-dss](), [real-time](), [security](), [sensitive-data]() ### AI overview This article explains why fintech payment systems require resilient architectures that preserve atomic data updates, maintain low latency during demand spikes, support global regulatory and data-residency requirements, and provide high availability and security. It also introduces real-time fraud detection as an added source of complexity. ### Source excerpt Fintech is one of the most competitive and highly regulated industries in the world. Whether you're a payment processor, digital-first bank, trading platform, or wallet provider, your infrastructure is directly tied to customer trust. In this environment, outages aren't just technical incidents; a single missed transaction, delayed authorization, or moment of downtime can erode customer confidence instantly. ## Sandbox Your AI Dev Tools: A Practical Guide for VMs and Lima DevFeed: [Sandbox Your AI Dev Tools: A Practical Guide for VMs and Lima]() Original publisher: [Read original article]() Author: Chris Hager Published: 2025-11-25T00:00:00Z Content type: tutorial Language: en Sources: [Chris Hager]() Topics: [AI-assisted coding](), [developer tooling](), [virtual machines](), [sensitive data](), [API keys](), [ssh](), [npm](), [pip]() Tags: [ai-assisted-coding](), [api-keys](), [dev-tools](), [npm](), [python](), [sandbox](), [sensitive-data](), [ssh]() ### AI overview A practical guide to sandboxing AI coding assistants and other development tools in isolated virtual machines using Lima. It explains how isolation helps protect SSH keys, API tokens, credentials, environment variables, and other sensitive data from arbitrary code, scripts, and package installation behavior. ### Source excerpt AI coding assistants, npm, pip, and other development tools can run arbitrary code and scripts on your machine, potentially stealing SSH keys, API tokens, wallet keys, sensitive credentials and other private data without you noticing. This guide shows you how to sandbox these tools in isolated VMs using Lima, so you can experiment and develop freely without putting your sensitive data at risk. Jump straight to the guide, or read on for a bit of personal context. ## How to protect sensitive data in a Temporal Application DevFeed: [How to protect sensitive data in a Temporal Application]() Original publisher: [Read original article]() Author: Joshua Smith Published: 2025-10-09T00:00:00Z Content type: tutorial Language: en Sources: [Temporal Blog]() Topics: [sensitive data](), [Security](), [payload](), [TLS (Transport Layer Security)](), [observability](), [ui](), [Command-line interface]() Tags: [cli](), [how-to](), [observability](), [payload](), [security](), [sensitive-data](), [temporal-concepts](), [tls](), [ui]() ### AI overview This tutorial explains how to protect sensitive data in Temporal applications. It describes Temporal's layered data-security approach, including TLS, Payload Codecs, and a Codec Server, while preserving observability through the Web UI and CLI. ### Source excerpt Learn how to protect sensitive data in Temporal apps using TLS, Payload Codecs, and a Codec Server without losing Web UI or CLI observability. ## ECS on EC2: Covering Gaps in IMDS Hardening DevFeed: [ECS on EC2: Covering Gaps in IMDS Hardening]() Original publisher: [Read original article]() Published: 2025-10-02T18:18:59Z Content type: tutorial Language: en Sources: [Latacora]() Topics: [Amazon Elastic Container Service](), [Amazon EC2](), [Security](), [Amazon Web Services](), [Containers](), [Credential theft]() Tags: [aws](), [containers](), [credential-theft](), [credentials](), [ec2](), [ecs](), [hardening](), [security](), [sensitive-data]() ### AI overview This article examines security gaps in Amazon ECS workloads running on EC2, focusing on task isolation and restricting access to the EC2 Instance Metadata Service. It discusses how weak isolation can expose credentials and sensitive data and outlines the need for more comprehensive hardening guidance. ### Source excerpt Introduction # AWS ECS is a widely-adopted service across industries. To illustrate the scale and ubiquity of this service, over 2.4 billion Amazon Elastic Container Service tasks are launched every week (source) and over 65% of all new AWS containers customers use Amazon ECS (source). There are two primary launch types for ECS: Fargate and EC2. The choice between them depends on factors like cost, performance, operational overhead, and the variability of your workload. ## 4 Ways to Secure Bedrock Agent-Initiated Actions with Teleport DevFeed: [4 Ways to Secure Bedrock Agent-Initiated Actions with Teleport]() Original publisher: [Read original article]() Author: jackson.pitts@goteleport.com (Jack Pitts) Published: 2025-09-12T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Amazon Bedrock](), [AI Agent](), [Model Context Protocol](), [Security](), [AWS IAM](), [Cloud]() Tags: [ai-agent](), [amazon-bedrock](), [automation](), [aws-iam](), [model-context-protocol](), [security](), [sensitive-data]() ### AI overview This tutorial explains how to secure AI agent-initiated actions involving Amazon Bedrock and the Model Context Protocol. It describes using unique identities, AWS IAM roles, x.509 certificates, policy checks, short-lived session certificates, and audit logging through Teleport. ### Source excerpt Bedrock AI agents can accelerate cloud operations but require guardrails. Learn four ways to secure Bedrock agent-initiated actions with Teleport. ## ISO 27001:2022 Requirements Explained DevFeed: [ISO 27001:2022 Requirements Explained]() Original publisher: [Read original article]() Author: jackson.pitts@goteleport.com (Jack Pitts) Published: 2025-08-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Requirements](), [audit](), [Security](), [Software as a service](), [sensitive data]() Tags: [audit](), [certifications](), [compliance](), [iso](), [iso-27001](), [migration](), [requirements](), [scope](), [security](), [sensitive-data]() ### AI overview This article explains the requirements of ISO/IEC 27001:2022, including its Information Security Management System framework, changes from the 2013 edition, certification migration, formal clauses, and Annex A controls. It describes how organizations can prepare for audits and certification. ### Source excerpt Learn about ISO 27001:2022 requirements. ## Data Safety Levels Framework: The foundation of how we look at data in Block DevFeed: [Data Safety Levels Framework: The foundation of how we look at data in Block]() Original publisher: [Read original article]() Author: John Rogers Published: 2025-01-16T00:00:00Z Content type: article Language: en Sources: [Cash App Code Blog]() Topics: [data](), [sensitive data](), [pii](), [context](), [Requirements](), [systems]() Tags: [context](), [customer-trust](), [data](), [engineering](), [pii](), [requirements](), [security-governance](), [sensitive-data](), [standards]() ### AI overview Block introduces its Data Safety Levels (DSL) Framework, a system for evaluating data sensitivity in context and building scalable, automated data-management policies across Cash App, Square, and TIDAL. ### Source excerpt Block uses the Data Safety Levels (DSL) Framework to evaluate data sensitivity. ## How to Mitigate SSRF Vulnerabilities in Go DevFeed: [How to Mitigate SSRF Vulnerabilities in Go]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-12-10T05:00:00Z Content type: tutorial Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Go Language](), [Vulnerabilities](), [Sanitization](), [Security](), [HTTP](), [snyk-code]() Tags: [awareness](), [blog](), [code-security](), [developer](), [devrel](), [go](), [how-to](), [http](), [security](), [sensitive-data](), [snyk-code](), [validation](), [vulnerabilities]() ### AI overview This tutorial explains how Server-Side Request Forgery (SSRF) can affect Go applications that make HTTP requests based on user input. It presents URL parsing, input validation and sanitization, and trusted-host allowlists as mitigation techniques, with example code for securing an HTTP request handler. ### Source excerpt Dive into Server-Side Request Forgery (SSRF) vulnerabilities in Go applications and explore mitigation techniques. Learn how to secure your Go code and leverage tools like Snyk Code for proactive security. [Next page]()