# web applications Published articles for web applications. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Making Websites Work with Windows High Contrast Mode DevFeed: [Making Websites Work with Windows High Contrast Mode]() Original publisher: [Read original article]() Author: Khan Academy Published: 2019-03-21T22:00:00Z Content type: tutorial Language: en Sources: [Khan Academy]() Topics: [Accessibility](), [web applications](), [Windows](), [CSS](), [Web Development]() Tags: [accessibility](), [css](), [developers](), [engineering](), [how-to](), [news](), [web-applications](), [web-frontend](), [windows]() ### AI overview This tutorial explains how Windows High Contrast Mode changes web application styling and presents accessibility considerations for backgrounds, images, borders, and outlines. It emphasizes using CSS for decorative styling and retaining borders and outlines for functional purposes. ### Source excerpt By Diedra Rater At Khan Academy, we've been working to make our web product more accessible to a ... Read more ## Spring Office Hours Podcast: S5E23 - Java 27 Release Party with Billy Korando DevFeed: [Spring Office Hours Podcast: S5E23 - Java 27 Release Party with Billy Korando]() Original publisher: [Read original article]() Author: danvega Published: 2026-09-16T00:00:00Z Content type: release Language: en Sources: [Spring]() Topics: [Java](), [java-27](), [JDK 27]() Tags: [batch](), [boot](), [cloud](), [developer](), [ecosystem](), [event-driven](), [java](), [java-27](), [live](), [live-stream](), [microservices](), [podcast](), [reactive](), [release](), [serverless](), [spring](), [web-applications]() ### AI overview A Spring Office Hours podcast episode discusses Java 27 with Billy Korando and highlights related launch updates and selected JDK enhancement proposals. ### Source excerpt Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Kansas City JUG organizer and Java Developer Advocate, Billy Korando. In this episode, we celebrate the release of Java 27. You can participate in our live stream to ask questions or catch the replay on your preferred podcast platform. Show Notes JDK 27 Java 27 Launch Stream JEP 534: Compact Object Headers by Default JEP 523: Make G1 the Default Garbage Collector in All Environments JEP 533: Structured Concurrency (Seventh Preview) JEP 531: Lazy Constants (Third Preview) JEP 536: JFR In-Process Data Redaction Transitioning Java to more frequent security updates Project Babylon S5E22 - Live from KCDC Billy Korando on LinkedIn The show: springofficehours.io - episodes, schedule, community Spring Developer on YouTube - join us live every Monday Dan Vega DaShaun Carter The Spring Blog - the news we cover each week ## Digital Experience Monitoring with Grafana Cloud: Session Replay, synthetic checks, and faster investigations DevFeed: [Digital Experience Monitoring with Grafana Cloud: Session Replay, synthetic checks, and faster investigations]() Original publisher: [Read original article]() Author: Bukola Ayodele Published: 2026-09-15T01:35:30.954353Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [digital experience monitoring](), [Grafana Cloud](), [Frontend observability](), [synthetic monitoring](), [real user monitoring](), [session replay](), [Instrumentation](), [web applications](), [JavaScript](), [Core Web Vitals](), [Traces]() Tags: [analytics](), [core-web-vitals](), [digital-experience-monitoring](), [frontend-observability](), [grafana](), [grafana-cloud](), [grafana-cloud-frontend-observability](), [instrumentation](), [javascript](), [logs](), [metrics](), [monitoring](), [observability](), [real-user-monitoring](), [session-replay](), [synthetic](), [synthetic-monitoring](), [traces](), [web-applications]() ### AI overview This article explains how Digital Experience Monitoring in Grafana Cloud combines Frontend Observability, Synthetic Monitoring, real user monitoring, and session replay. It shows how these capabilities help engineering teams detect issues proactively, understand their scope and root causes, correlate frontend signals with backend traces, and resolve production problems faster. ### Source excerpt When something breaks in production, the questions that matter most are also the toughest to answer from metrics alone: who was affected, what did they actually see, and is this worth waking someone up for? Answering those questions requires a fuller picture of the issue and its impact on your users. That's where Digital Experience Monitoring (DEM) in Grafana Cloud comes in. By combining Frontend Observability and Synthetic Monitoring, DEM connects real user experiences with proactive testing, helping engineering teams understand the scope of an issue, investigate its cause, and resolve it faster, all within Grafana Cloud. In this blog post, we'll walk through some of the latest DEM updates in Grafana Cloud, and how to get started. You can also learn more by watching the video below. First, what is Digital Experience Monitoring? Digital Experience Monitoring in Grafana Cloud gives you a complete picture of how users experience your web applications, from real user data to proactive synthetic checks. DEM helps your team achieve: Real user visibility: know how users truly experience your web application, not just what your backend metrics suggest. Proactive detection: catch problems before your users do, using automated checks against your critical user journeys. End-to-end correlation: connect a frontend signal to the backend trace behind it. Faster resolution: cut your mean time to recovery from hours to minutes. Session Replay: see exactly what your users saw Session Replay in Grafana Cloud Frontend Observability lets you visually replay what a user saw and did inside your web application. Your team can watch exactly what users experienced and correlate it with real user monitoring signals like Core Web Vitals, user actions, and traces, which makes it a powerful tool for investigating bugs and running root cause analysis. Session Replay is powered by Faro, Grafana's open source JavaScript instrumentation library for collecting real user monitoring data. Let's walk ## This Week in Spring - September 15th, 2026 DevFeed: [This Week in Spring - September 15th, 2026]() Original publisher: [Read original article]() Author: joshlong Published: 2026-09-15T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [Spring AI](), [Java](), [Security](), [OAuth 2.0](), [Spring Boot](), [JavaFX](), [IntelliJ IDEA](), [debugging]() Tags: [batch](), [boot](), [cloud](), [debugging](), [event-driven](), [intellij-idea](), [java](), [learn](), [microservices](), [oauth-2-0](), [reactive](), [security](), [serverless](), [spring](), [spring-ai](), [web-applications]() ### AI overview A September 15, 2026 roundup of Spring-related developer content, covering Java memory management, Spring AI chat-memory summarization, JavaFX application security with Spring Security and OAuth 2.0, OAuth 2.1 with Spring Authorization Server, Spring and Gemini video understanding, Java AI libraries, Netflix's Java and Spring story, Spring Batch, and Spring Boot debugging. ### Source excerpt Hi, Spring fans! Welcome to another rip-roarin' installment of This Week in Spring! I'm writing this to you from sun-kissed San Francisco, CA, sipping some coffee and watching the bay from my breakfast nook. What a wonderful day! A wonderful day in which to learn about the latest and greatest in Spring, even! Let's dive right in! I really loved this presentation by Oracle's Ron Pressler on the principles of memory management in Java More Craig Walls Spring AI goodness! Here's a nice recipe on summarizing chat memory Over the last few weeks, I've done some content on securing JavaFX applications with Spring Security and OAuth 2.0. That work has landed, and our friends at JFX-central.com have taken that video and the resulting code and transcribed the content into this lovely tutorial - check it out! I loved this post on securing modern applications with OAuth 2.1 and Spring Authorization Server This is a really cool video on understanding video with Spring and Gemini I just learned about this amazing new Java library called Quixotic.ai (what a name! LOL) that provides all sorts of cool stuff that might make your Java-based AI workloads even better. I wonder if there are amazing integration possibilities for Spring AI, too... In last week's A Bootiful Podcast, I was delighted to sit down and chat with Netflix's Paul Bakker on their Java and Spring story, scaling the system, and more. Huh! There's a new Spring Batch IntelliJ IDEA plugin, but search me for what's new! No release notes. Either way, get it while it's hot! Speaking of Spring Batch, there's a nice post here on scaling to millions of rows with Spring Batch that just dropped Speaking of Spring and IntelliJ, there's a nice article over on Baeldung on debugging Spring Boot-based workloads with the Spring debugger ## Primer on Jinja Templating DevFeed: [Primer on Jinja Templating]() Original publisher: [Read original article]() Author: Philipp Acsany Published: 2026-09-13T14:00:00Z Content type: tutorial Language: en Sources: [Real Python]() Topics: [Template](), [Python](), [web applications](), [Front end](), [Flask](), [modern web development](), [HTML](), [Django]() Tags: [building](), [code](), [content](), [django](), [features](), [framework](), [how-to](), [html](), [learn](), [learning](), [python](), [tutorial](), [web-applications]() ### AI overview A practical introduction to Jinja templating in Python. The tutorial covers installation, template creation and rendering, dynamic content, conditionals, loops, filters, macros, nesting, standalone text generation, and integration with Flask. ### Source excerpt With Jinja, you can build rich templates that power the front end of your web applications. But you can use Jinja without a web framework running in the background. Anytime you want to create text files with programmatic content, Jinja can help you out. ## Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability DevFeed: [Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability]() Original publisher: [Read original article]() Author: Lukasz Gut Published: 2026-09-12T11:22:06.456390Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [session replay](), [Grafana Cloud Frontend Observability](), [Frontend observability](), [web applications](), [telemetry](), [SDKs]() Tags: [analytics](), [frontend-observability](), [grafana](), [grafana-cloud-frontend-observability](), [instrumentation](), [logs](), [metrics](), [monitoring](), [observability](), [privacy](), [session-replay](), [telemetry](), [traces](), [web-applications]() ### AI overview The article introduces Session Replay, a public-preview add-on for Grafana Cloud Frontend Observability. It visually reconstructs how a web application appeared and changed during a user session, linking that playback to session timelines and technical telemetry so engineering teams can investigate frontend problems more directly. ### Source excerpt Grafana Cloud Frontend Observability helps engineering teams quantify the end user experience by bringing metrics, logs, traces, and user session context to client-side web applications. Teams can monitor application health and performance over time, triage errors, and correlate frontend signals with backend telemetry to investigate issues across the stack. Yet some of the hardest frontend problems remain difficult to diagnose. A support ticket might report that a checkout button did nothing, a form unexpectedly reset, or a workflow broke only in one browser or on one device. Metrics can reveal a performance regression, logs can capture an error, and traces can expose a slow request, but no single signal shows what the interface actually looked like to the user. This is exactly why we built Session Replay, an add-on feature in Frontend Observability that provides a visual reconstruction of a user's journey, connected to the telemetry Grafana Cloud already collects. It helps engineering teams move from a reported problem to seeing what happened and knowing exactly where to investigate next. What is Session Replay in Grafana Cloud Frontend Observability? Session Replay, now in public preview, adds visual playback capabilities to Frontend Observability. It reconstructs how a web application appeared and changed as a user navigated and interacted with it, so you can observe the journey as it unfolded instead of inferring it from individual telemetry events. Frontend Observability already brings together a chronological timeline of the events within a user session. That timeline tells you what happened and when. Session Replay adds the missing visual context: what was happening in the interface around those events and how one interaction led to the next. Because both views belong to the same session, you can move between the user experience and the relevant technical signals without losing the thread of your investigation. Session Replay builds on the Grafana Faro Web SD ## Adding Google Login to a React App with Auth0 DevFeed: [Adding Google Login to a React App with Auth0]() Original publisher: [Read original article]() Author: Carla Urrea Stabile Published: 2026-09-11T00:00:00Z Content type: tutorial Language: en Sources: [Auth0 Blog]() Topics: [Auth0](), [React](), [SDK](), [OAuth](), [OpenID connect (OIDC)](), [Vite](), [web applications](), [Node.js]() Tags: [auth0](), [authentication](), [google](), [node-js](), [oauth](), [oidc](), [react](), [sdk](), [tutorial](), [vite](), [web-applications]() ### AI overview A step-by-step tutorial for adding Google login to a Vite-based React application with Auth0. It covers installing the Auth0 React SDK, creating and configuring an Auth0 application, setting callback, logout, and web-origin URLs, and preparing credentials for production Google authentication. ### Source excerpt Add Google login to a React app with Auth0. A step-by-step tutorial from installing the Auth0 React SDK to configuring your own production Google credentials. ## A Bootiful Podcast: Netflix's Paul Bakker DevFeed: [A Bootiful Podcast: Netflix's Paul Bakker]() Original publisher: [Read original article]() Author: joshlong Published: 2026-09-10T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [Concurrency](), [Concurrent Programming](), [Tooling]() Tags: [ai](), [batch](), [boot](), [cloud](), [complexity](), [concurrency](), [event-driven](), [java](), [microservices](), [netflix](), [podcast](), [reactive](), [serverless](), [spring](), [tooling](), [web-applications]() ### AI overview A podcast interview with Netflix's Paul Bakker on scaling Java, adopting newer JDKs to reduce costs, and using virtual threads and structured concurrency instead of reactive complexity. It also previews AI-powered tooling and Project Valhalla's future. ### Source excerpt Hi, Spring fans! This week's interview is a must-watch if you care about where Java is headed next. This week, I talk to Netflix's Paull Bakker! We dig into Netflix's real-world playbook for scaling Java, cutting costs with newer JDKs, and replacing reactive complexity with virtual threads and structured concurrency. Plus, there's a sneak peek at the exciting future of Java, from AI-powered tooling to the upcoming Valhalla era. ## Threat matrix: Mapping threats across cloud web applications DevFeed: [Threat matrix: Mapping threats across cloud web applications]() Original publisher: [Read original article]() Author: Microsoft Security Research and Lior Leizerovich Published: 2026-09-09T21:30:00Z Content type: article Language: en Sources: [Microsoft Security Blog]() Topics: [web applications](), [cloud-infrastructure](), [Microsoft]() Tags: [cloud](), [framework](), [mapping](), [microsoft](), [security](), [serverless](), [web-applications]() ### AI overview Microsoft introduces a MITRE ATT&CK-aligned threat matrix for cloud-hosted web applications and serverless platforms. The framework maps attack techniques to help security teams identify visibility gaps, prioritize hardening, and investigate threats across application and cloud layers. ### Source excerpt Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms. The post Threat matrix: Mapping threats across cloud web applications appeared first on Microsoft Security Blog. ## Spring Tools 5.4.0 released DevFeed: [Spring Tools 5.4.0 released]() Original publisher: [Read original article]() Author: martinlippert Published: 2026-09-09T00:00:00Z Content type: release Language: en Sources: [Spring]() Topics: [releases](), [Claude](), [Model Context Protocol](), [Visual Studio Code]() Tags: [batch](), [boot](), [claude](), [claude-code](), [cloud](), [event-driven](), [java](), [mcp](), [microservices](), [performance](), [reactive](), [release](), [release-notes](), [serverless](), [spring](), [tools](), [updates](), [validation](), [web-applications]() ### AI overview Spring Tools 5.4.0 has been released for several development environments, with new validations and quick fixes, Claude Code and MCP enhancements, and stability and performance improvements. ### Source excerpt On behalf of the team and everyone who has contributed, I am pleased to announce the 5.4.0 release of the Spring Tools for Visual Studio Code, Cursor, Eclipse, Theia - and Claude Code. Hightlights New Validations & Quick Fixes: Added validations and quick fixes to convert to @ApplicationModuleListener, @SpringJUnitConfig, @RestController, and specific @Scope annotations Claude Code / MCP Enhancements: Enabled the Claude Code plugin to render a project's logical structure Stability & Performance: Significant speedups around various quick fixes and repository-based version validation + improved reliability while indexing source code Updates to the Spring Tools for Eclipse distribution updated to the latest Eclipse 2026-09 release (new and noteworthy) Detailed changes can be found in the release notes: https://github.com/spring-projects/spring-tools/releases/tag/5.4.0.RELEASE Downloads To download the distribution for Eclipse and find links to the marketplace entries for Visual Studio Code, Cursor, and Theia, please go visit: Spring Tools: https://spring.io/tools/ Next up is the 5.5.0 release, currently scheduled for mid December 2026. ## Spring Office Hours Podcast: S5E22 - Live from KCDC DevFeed: [Spring Office Hours Podcast: S5E22 - Live from KCDC]() Original publisher: [Read original article]() Author: danvega Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [Spring AI](), [Java](), [JDK 27]() Tags: [ai](), [batch](), [boot](), [cloud](), [conference](), [event-driven](), [events](), [java](), [jdk-27](), [live-stream](), [microservices](), [podcast](), [reactive](), [serverless](), [spring](), [web-applications]() ### AI overview Spring Office Hours Podcast episode S5E22 features Dan Vega and DaShaun Carter broadcasting from the Kansas City Developer Conference, with conference highlights, attendee and speaker conversations, and news from the Spring and Java ecosystems. ### Source excerpt Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun broadcast live from the Kansas City Developer Conference, one of the largest community driven developer events in the country. Expect conference highlights, hallway track conversations with speakers and attendees, and the latest news from the Spring and Java worlds. You can participate in our live stream to ask questions or catch the replay on your preferred podcast platform. Show Notes KCDC Spring AI Recipes Spring Modulith Spring AI Community Project Babylon JDK 27 The show: springofficehours.io - episodes, schedule, community Spring Developer on YouTube - join us live every Monday Dan Vega DaShaun Carter The Spring Blog - the news we cover each week ## This Week in Spring - September 8th, 2026 DevFeed: [This Week in Spring - September 8th, 2026]() Original publisher: [Read original article]() Author: joshlong Published: 2026-09-08T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [Artificial Intelligence](), [Large Language Model](), [Electron](), [App](), [IntelliJ IDEA]() Tags: [ai](), [applications](), [article](), [batch](), [boot](), [cloud](), [event-driven](), [idea](), [intellij](), [intellij-idea](), [java](), [linux](), [llm](), [llms](), [microservices](), [oauth](), [reactive](), [serverless](), [spring](), [spring-ai](), [spring-boot](), [video](), [web-applications](), [windows]() ### AI overview This weekly Spring roundup highlights Spring AI content about running LLMs in the JVM and locally, building a Spring AI starter for agents.md, and improving tool use. It also covers Spring Boot and JavaFX desktop applications, native images, Spring Security OAuth clients, secure application images, external configuration, Spring Cloud AWS, and a Spring Boot Analyzer. ### Source excerpt Bonjour a tout le monde! Welcome to another rip-roarin' installment of This Week in Spring! It's a fabulous and fun day here in Paris, France, as I wait to board the train to Amsterdam for the IntelliJ IDEA conference! It's going to be amazing. We've got another incredible week's roundup to dive into, so let's do it! I feel like some of the best content over the past several months in this weekly roundup has been Craig Walls' Spring AI Recipes section. Fantastic stuff! This latest one looks at running an LLM in-JVM This is a nice article on using vertical slices in Spring Boot on Solodev.sk, by Dominik. Well done! Another amazing installment from Craig Walls, this one looking at running against local LLMs My friend and colleague DaShaun Carter talks about his Spring AI starter for agents.md Craig also has this lovely post on efficient tool use in Spring AI Last week, I did two videos on using Spring Boot, JavaFX, GraalVM native images, and Spring Security (and PKCE) to build native, lightning-fast, dynamic, efficient, reusable desktop applications that run well on Mac, Windows, and Linux, and look amazing, while taking small fractions of the RAM of a similar Electron-based application. Here's the first one, showing how to use Spring Boot and JavaFX together, so that you get the component model, event dispatch subsystem, internationalization, lifecycle management, and, of course, the entire and very rich ecosystem of Spring components and can use them to manage JavaFX components, too. We also look at native image compilation. Here's the second video, which looks at using Spring Security's OAuth client in the context of a desktop application, which can not, by definition, hold a client secret. In last week's installment of A Bootiful Podcast, I was delighted to chat with BellSoft's Catherine Edelveis about trusted and secure images for your Spring Boot applications This is a nice post on managing external configurations with Spring Cloud Config A nice recap of some of ## How to verify your Azure Application Gateway is zone-redundant DevFeed: [How to verify your Azure Application Gateway is zone-redundant]() Original publisher: [Read original article]() Author: Andre Newman Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Azure](), [Availability](), [Cloud](), [web applications](), [Command-line interface](), [Shared Responsibility Model]() Tags: [availability](), [azure](), [cli](), [cloud](), [features](), [high-availability](), [how-to](), [infrastructure](), [post](), [shared-responsibility](), [web-applications]() ### AI overview This how-to article explains availability-zone redundancy for Azure Application Gateway. It describes the redundancy model, the shared responsibility boundary, and how to verify whether a gateway is zone-redundant or zonal using Azure CLI and Resource Graph. It also cautions that a redundant gateway does not by itself make the services behind it redundant. ### Source excerpt This post explains what zone redundancy means for Application Gateway, how to confirm whether a given gateway is zone-redundant or zonal using the Azure CLI and Resource Graph, and why a gateway surviving a zone failure doesn't mean the services calling through it will. ## A Bootiful Podcast: BellSoft's Catherine Edelveis on hardened runtime images, container security, and more DevFeed: [A Bootiful Podcast: BellSoft's Catherine Edelveis on hardened runtime images, container security, and more]() Original publisher: [Read original article]() Author: joshlong Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [container-security]() Tags: [batch](), [boot](), [cloud](), [container-security](), [event-driven](), [java](), [microservices](), [podcast](), [reactive](), [security](), [serverless](), [spring](), [spring-boot](), [web-applications]() ### AI overview A podcast conversation about using buildpacks and hardened images to ship Spring Boot applications with stronger security, cleaner defaults, and less Dockerfile work. ### Source excerpt Hi, Spring fans! I chat with BellSoft's Catherine Edelweiss about using buildpacks and hardened images to ship Spring Boot apps with stronger security, cleaner defaults, and far less Dockerfile pain. #BellSoft #Docker #Java #JRE #SpringBoot ## A Starlette middleware guide for FastAPI and Python developers DevFeed: [A Starlette middleware guide for FastAPI and Python developers]() Original publisher: [Read original article]() Author: Aditya Raj Published: 2026-08-28T07:00:00Z Content type: tutorial Language: en Sources: [Honeybadger]() Topics: [FastAPI](), [Python](), [ASGI](), [web applications](), [Cross-origin resource sharing (CORS)]() Tags: [auth](), [cors](), [developers](), [fastapi](), [guide](), [logging](), [middleware](), [python](), [python-articles](), [starlette](), [web-applications]() ### AI overview This guide explains how middleware works in Starlette and FastAPI applications. It covers built-in middleware, custom middleware using pure ASGI and BaseHTTPMiddleware, and execution order when multiple middleware layers process requests and responses. ### Source excerpt Starlette middlewares let you apply logging, auth, and CORS across every route in a web app without duplicating code. This article covers Starlette's built-in middlewares, building custom ones with pure ASGI and BaseHTTPMiddleware, and the execution-order rules that keep your FastAPI applications secure and fast. Read on to learn how to build and order Starlette middlewares the right way. ## Tailscale PAM beta: Manage connectivity and privileged access in one place DevFeed: [Tailscale PAM beta: Manage connectivity and privileged access in one place]() Original publisher: [Read original article]() Author: Smriti Sharma Published: 2026-08-27T14:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [Authorization](), [Security](), [Kubernetes](), [OpenSSH](), [API](), [Databases](), [web applications](), [incident]() Tags: [api](), [compliance](), [databases](), [external](), [identity](), [incident](), [infrastructure](), [kubernetes](), [logs](), [production](), [security](), [servers](), [slack](), [ssh](), [web-applications]() ### AI overview Tailscale PAM beta brings privileged access management into the Tailscale admin console. It provides resource-specific access policies, just-in-time approvals through Slack, and session logs and recordings for audits and investigations across databases, servers, Kubernetes clusters, and web applications. ### Source excerpt Just-in-time access, resource policies, and session auditing, right where you need them. ## Introducing v5 Droplets: next-generation performance, sized to your workload DevFeed: [Introducing v5 Droplets: next-generation performance, sized to your workload]() Original publisher: [Read original article]() Author: Krishna Nallamothu Published: 2026-08-26T02:19:47Z Content type: release Language: en Sources: [DigitalOcean]() Topics: [Digital Ocean](), [Hardware](), [cpu](), [AI Platform](), [web applications]() Tags: [agentic-ai](), [amd](), [audio](), [compute](), [digitalocean](), [droplets](), [performance](), [product-updates](), [v5](), [video](), [web-applications]() ### AI overview DigitalOcean announces the general availability of v5 Droplets, built on 5th Gen AMD EPYC processors. The release targets demanding workloads and offers independently configurable vCPU, memory, and storage, with up to 30% higher performance per core than previous-generation Droplets. ### Source excerpt We're excited to introduce v5 Droplets, a new generation of compute built on 5th Gen AMD EPYC™ processors. v5 Droplets are purpose built to deliver higher performance for demanding workloads such as compute-intensive agentic AI platforms, AI/ML tools, high throughput audio/video transcoding, and high-traffic distributed web applications and APIs. v5 Droplets deliver up to 30% higher performance per core than our previous-generation Droplets. For the first time, you can select vCPU, memory, and storage independently and pay for only the resources you choose. Your Droplet fits your application, and your bill reflects exactly what you used, nothing more. You can continue creating bundled Droplets the way you're used to, or choose v5 Droplets for next-generation workload-optimized performance. Designed for workloads that need more More teams are building AI applications, agent platforms, bursty data pipelines, and hosting high-traffic web applications on DigitalOcean than ever before, and those workloads demand higher performance. They need the faster cores, flexible memory ratios, and compute configurations that v5 Droplets provide. Starting with v5, every Droplet is tied to a hardware generation, so you get the same silicon and the same performance every time. You can choose Shared Droplets (s5) for bursty, variable work that doesn't need a full dedicated core, or General purpose Droplets (g5) for guaranteed, dedicated CPU, with memory ratios from 2x to 8x per vCPU. Pricing is simple and based on an hourly rate. You see each resource's price as you configure, a running total as you go, and one line per Droplet on your bill. Early customers running game servers and high throughput e-commerce applications saw 2x performance compared to their existing Droplets. No changes to existing Droplets pricing or experience Every existing Droplet plan stays exactly as it is and maintains the same prices, same bundles, same monthly caps, no migrations, and nothing new on your invoi ## Announcing a Trillion Dollar Security grant for WEBCAT DevFeed: [Announcing a Trillion Dollar Security grant for WEBCAT]() Original publisher: [Read original article]() Author: Ethereum Foundation Access Cluster Published: 2026-08-05T00:00:00Z Content type: release Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [Security](), [Open Source](), [browsers](), [Front end](), [Firefox]() Tags: [announce](), [browsers](), [ethereum](), [firefox](), [front-end](), [funding-coordination](), [open-source](), [security](), [signing](), [supply-chain-attacks](), [web-applications]() ### AI overview The Ethereum Foundation's Trillion Dollar Security initiative announced a grant to the Freedom of the Press Foundation to support continued development of WEBCAT, an open source tool that enables browsers to verify whether code served by enrolled websites matches code published by their developers. The grant will also support bringing this protection to Ethereum wallets and apps. ### Source excerpt The Ethereum Foundation's Trillion Dollar Security (1TS) initiative is proud to announce a grant allocation to Freedom of the Press Foundation (FPF) to support the continued development of WEBCAT. WEBCAT is an open source tool that lets browsers verify that code served by an enrolled website matches what its developers... ## Building an agentic harness that outlasts the model DevFeed: [Building an agentic harness that outlasts the model]() Original publisher: [Read original article]() Author: Zack Deveau Published: 2026-07-29T15:30:00Z Content type: article Language: en Sources: [Shopify Engineering](), [Shopify Engineering - Shopify Engineering]() Topics: [Application Security](), [Shopify](), [Vulnerabilities](), [Code review](), [Orchestration](), [pull-requests](), [Rails](), [Ruby](), [web applications](), [Back end]() Tags: [agentic](), [application-security](), [backend](), [building](), [code](), [orchestration](), [pull-requests](), [review](), [ruby](), [shopify](), [vulnerabilities](), [web-applications](), [workflow]() ### AI overview Shopify describes an agentic code review and test-oracle harness for application security. The harness scans software for vulnerabilities, validates findings with real tests, generates Shopify-specific fixes, and opens relevant pull requests. The article also explains its Dispatch orchestrator, parallel scanning workflow, reusable application context, and diff-based follow-up scans. ### Source excerpt We built an agentic code review and test oracle harness that discovers vulnerabilities, proves them with real tests, and provides Shopify-tuned fixes. ## Your business runs on credentials IT did not provision DevFeed: [Your business runs on credentials IT did not provision]() Original publisher: [Read original article]() Author: info@1password.com (Jairo Camacho) Published: 2026-07-28T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [passwords](), [Security](), [web applications](), [Single sign-on (SSO)]() Tags: [business](), [enterprise](), [security](), [unified-access](), [web-applications]() ### AI overview The article describes how unmanaged credentials created outside IT systems can become invisible, unrotated, and risky access points for businesses. It presents Credential Governance in 1Password Enterprise Password Manager as a workflow for discovering company-owned credentials, reclaiming them as company-managed items, and governing access over time. ### Source excerpt Right now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated. And until today, you didn't know it existed. That credential was created outside your systems, became essential to a business workflow, and went invisible. Every organization has hundreds like it: break-glass accounts copied into multiple vaults as a precaution, contractor logins that outlasted the contract, apps that don't support SAML so someone signed up and shared the password in Slack. Nobody in IT provisioned any of them, and all of them grant access to real systems. These are your highest-risk credentials: unrotated, unaccountable, and largely invisible. Attackers go after exactly these accounts: the ones with no rotation schedule, no owner, and no audit history. And credentials are the way in: 88% of attacks against web applications involve stolen credentials, according to Verizon's Data Breach Investigations Report (2025). Every unmanaged credential expands your organization's attack surface. These credentials persist because the alternatives are hard. The SSO tax makes federation too costly for some apps. Others simply don't support SAML or OIDC. So the credentials keep accumulating, untracked and unrotated, while auditors ask for evidence you can't produce. Credential Governance gives admins a repeatable way to find those accounts, take ownership of them, and govern access over time, all inside 1Password Enterprise Password Manager. How Credential Governance works Credential Governance gives IT and security admins a repeatable workflow to discover unmanaged credentials, reclaim them as company-managed credentials, and govern access over time. Discover: Build a complete inventory of unmanaged credentials. 1Password finds Login items across all employee and shared vaults and filters by domain to surface company-owned accounts. With every comp ## JWT authentication: Best practices and when to use it DevFeed: [JWT authentication: Best practices and when to use it]() Original publisher: [Read original article]() Author: Flavio Copes Published: 2026-07-23T17:00:27Z Content type: tutorial Language: en Sources: [LogRocket Blog]() Topics: [JSON Web Tokens](), [Authentication](), [Security](), [Authorization](), [web applications](), [JSON](), [payload](), [client](), [OAuth](), [OAuth 2.0](), [OpenID connect (OIDC)]() Tags: [authentication](), [best-practices](), [blog](), [dev](), [development](), [guide](), [http](), [json](), [oauth](), [payload](), [security](), [tokens](), [uncategorized](), [web-applications](), [web-development]() ### AI overview This tutorial explains JWTs as a token format for transmitting claims between a server and client, covering their structure, encoding, authentication and authorization uses, security concerns, and best practices. It also discusses OAuth 2.0, OpenID Connect, secure token storage, refresh token rotation, XSS and CSRF risks, and when server-side sessions may be preferable. ### Source excerpt A guide for using JWT authentication to prevent basic security issues while understanding the shortcomings of JWTs. The post JWT authentication: Best practices and when to use it appeared first on LogRocket Blog. ## WebMCP in Chrome (A 101 Guide) DevFeed: [WebMCP in Chrome (A 101 Guide)]() Original publisher: [Read original article]() Author: Amit Merchant Published: 2026-07-23T00:00:00Z Content type: tutorial Language: en Sources: [Amit Merchant]() Topics: [Model Context Protocol](), [AI Agent](), [browser](), [web applications]() Tags: [agents](), [ai](), [browser](), [guide](), [mcp](), [model-context-protocol](), [web-applications]() ### AI overview This guide explains WebMCP as a browser-based implementation of the Model Context Protocol. It describes how web applications can expose standardized tools, resources, and prompts to AI agents, enabling structured interaction without relying on DOM automation or screen scraping. ### Source excerpt MCP (Model Context Protocol). At this point, you might have come across this term if you've worked with any kind of AI agent. But if you still haven't, here's a quick refresher on what it is and why it's important. ## Handling concurrency on the Web with Web Locks API DevFeed: [Handling concurrency on the Web with Web Locks API]() Original publisher: [Read original article]() Author: Cesar Contreras Published: 2026-07-14T15:36:00Z Content type: tutorial Language: en Sources: [OLX]() Topics: [Concurrency](), [Web](), [API](), [Web Development](), [web applications](), [browser]() Tags: [api](), [browser](), [concurrency](), [locks](), [react](), [resumable-file-upload](), [synchronization](), [web](), [web-applications](), [web-development]() ### AI overview This article explains concurrency on the web through the Web Locks API. It describes an OLX upload scenario involving files up to 20GB, where uploads should resume after a browser or tab is reopened without requiring the user to remain in the web app. It identifies multiple tabs resuming the same upload simultaneously as a cause of duplicate uploads, wasted bandwidth, extra processing costs, and unpredictable progress. ### Source excerpt Image by the_iop from Pixabay Concurrency in programming is the ability to manage and execute multiple tasks or processes at the same time (or appear to), allowing programs to remain responsive and efficient. Think of it like a chef in a busy kitchen: they're not cooking every dish from start to finish sequentially, but instead chopping vegetables while one pan simmers and another bakes; juggling progress on several tasks concurrently. I'm a frontend engineer at OLX working mostly with React and NextJs, but I also came from a background in which I worked primarily in concurrent programs with Java. Creating multi-threaded applications can be a pain, dealing with locks, semaphores... and my favorite... deadlocks (very scary in large codebases). Once I transitioned fully to Web development, I never imagined I would have to deal with scenarios like this, and then here I am writing my first article about it. Web development has turned into a very powerful ecosystem, from the previous era where the web was only about flashy animations using HTML marquee (a bit of sarcasm here 😆), dominated by JQuery, to a really powerful environment where you can use Workers, 2D and 3D animations with WebGL and Canvas, offline capabilities with Service Workers, and the list continues. This is evidence that the Web can now face really complex challenges, and it's just a matter of time before you have to face similar ones. The problem Recently, at OLX, we faced the challenge of working with large file size uploads. Providing the best user experience is tricky when it comes to handling uploads, and most of the real use cases out there require the user to stay in the web app until the upload completes, but we didn't want that. Since we are working with large file sizes (up to 20GB), we want the user to be free and do other stuff while this is uploading, so if the user closes and opens the browser or tab, the upload should continue with no manual intervention. For this, we had to provide a mechani ## One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement DevFeed: [One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement]() Original publisher: [Read original article]() Author: Aleksandar Milenkoski & Julian-Ferdinand Vögele Published: 2026-07-09T12:55:00Z Content type: article Language: en Sources: [SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms.]() Topics: [Security](), [C2](), [web applications](), [data](), [Server](), [Network]() Tags: [analysis](), [attacks](), [c2](), [china](), [data](), [identity](), [india](), [pakistan](), [security](), [servers](), [web-applications]() ### AI overview An analysis of cyberespionage intrusions targeting Pakistani law enforcement organizations from 2024 to 2026. Suspected China- and India-nexus actors converged on Balochistan Police, compromising servers, network appliances, and web applications containing police and citizen data, including biometric, criminal, identity-linked, and personnel records. ### Source excerpt China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakistan's internal security. [Next page]()