# web applications Software application accessed through a web browser, commonly implemented with client and server components communicating over HTTP. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Learn How to Deploy, Secure, and Automate Full-Stack Web Apps DevFeed: [Learn How to Deploy, Secure, and Automate Full-Stack Web Apps]() Original publisher: [Read original article]() Author: Beau Carnes Published: 2026-09-16T15:28:18Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [web applications](), [Deployment](), [CI/CD](), [FastAPI](), [GitHub Actions](), [Vue.js](), [nginx](), [firewalls](), [Python](), [Cloudflare](), [SSL](), [Ubuntu]() Tags: [analysis](), [authentication](), [ci-cd](), [deploy](), [fastapi](), [full-stack](), [github-actions](), [how-to](), [web](), [web-apps](), [youtube]() ### AI overview This article introduces an 11-hour freeCodeCamp course on deploying, securing, and automating a Vue.js and FastAPI web application. It covers Ubuntu server setup, SSH hardening, firewalls, application runtimes, Meilisearch, DNS, SSL, Nginx, Cloudflare, GitHub Actions, security testing, and observability. ### Source excerpt Taking a web application from local development to a live, secure production environment can be daunting if you've never looked under the hood. We just published a comprehensive course on the freeCode ## Making Websites Work with Windows High Contrast Mode DevFeed: [Making Websites Work with Windows High Contrast Mode]() Original publisher: [Read original article]() Author: Khan Academy Published: 2019-03-21T22:00:00Z Content type: tutorial Language: en Sources: [Khan Academy]() Topics: [Accessibility](), [web applications](), [Windows](), [CSS](), [Web Development]() Tags: [accessibility](), [css](), [developers](), [engineering](), [how-to](), [news](), [web-applications](), [web-frontend](), [windows]() ### AI overview This tutorial explains how Windows High Contrast Mode changes web application styling and presents accessibility considerations for backgrounds, images, borders, and outlines. It emphasizes using CSS for decorative styling and retaining borders and outlines for functional purposes. ### Source excerpt By Diedra Rater At Khan Academy, we've been working to make our web product more accessible to a ... Read more ## Support the well-known change password URL with Appwrite Auth DevFeed: [Support the well-known change password URL with Appwrite Auth]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-16T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [passwords](), [Appwrite](), [Application Security](), [web applications](), [W3C]() Tags: [bitwarden](), [deployment](), [passwords](), [security](), [tutorial](), [tutorials](), [w3c]() ### AI overview This tutorial shows how to support the well-known change password URL in a TanStack Start app using Appwrite Auth. It explains the redirect, the change-password form for signed-out visitors, autocomplete hints, and deployment to Appwrite Sites. ### Source excerpt Password managers open /.well-known/change-password when they find a leaked or weak password. Add the redirect and a change password page backed by Appwrite Auth. ## B2B Medical & Pharma UX Benchmark: 3,400+ Performance Scores and 2,600+ Best Practice Examples DevFeed: [B2B Medical & Pharma UX Benchmark: 3,400+ Performance Scores and 2,600+ Best Practice Examples]() Original publisher: [Read original article]() Author: Anders Nielsen Published: 2026-09-15T09:30:00Z Content type: article Language: en Sources: [Baymard Institute]() Topics: [User experience (UX)](), [Testing](), [web applications](), [Mobile]() Tags: [b2b](), [benchmark](), [desktop](), [ecommerce](), [mobile](), [performance](), [research](), [testing](), [ux]() ### AI overview Baymard reports on a UX benchmark covering 10 B2B Medical & Pharma ecommerce sites, assessed across more than 400 research-based UX parameters. The sites ranged from poor to mediocre overall, with recurring issues in product information, pricing, search, and collaborative cart workflows. ### Source excerpt (Note: Unfortunately, e-mail and RSS don't support advanced layouts and features. If the graphics in this article look strange, you may want to read the article in your web browser.) At Baymard, we've just released a new UX benchmark with 10 "B2B Medical & Pharma" UX case studies. This follows from our large-scale user testing and adds to our existing ecommerce UX benchmark. In this article, we give you a snapshot of the overall UX performance. 10 B2B Medical & Pharma UX Case Studies and the Overall Performance AbCam mediocre B2B Medical & Pharma 40 page designs: desktop, mobile Waters mediocre B2B Medical & Pharma 38 page designs: desktop, mobile Allegro Medical mediocre B2B Medical & Pharma 41 page designs: desktop, mobile Medline mediocre B2B Medical & Pharma 25 page designs: desktop, mobile Cole-Parmer mediocre B2B Medical & Pharma 50 page designs: desktop, mobile Mckesson poor B2B Medical & Pharma 22 page designs: desktop, mobile Thermo Fisher poor B2B Medical & Pharma 42 page designs: desktop, mobile Henry Schein poor B2B Medical & Pharma 38 page designs: desktop, mobile Bound Tree Medical poor B2B Medical & Pharma 41 page designs: desktop, mobile Sigma Aldrich poor B2B Medical & Pharma 41 page designs: desktop, mobile YourSite.com? Want to know how your site performs? Get Premium access to review your own site or have it audited by Baymard researchers. These are the 10 in-depth B2B Medical & Pharma UX case studies. The 10 sites have been manually assessed across 400+ research-based UX parameters relevant to B2B Medical & Pharma, resulting in 3,400+ weighted UX performance scores and 2,600+ best practice examples from these desktop and mobile sites. Each of the 3,400+ UX performance scores from the 10 B2B Medical & Pharma case studies is summarized in the interactive scatterplot below -- showing you how they perform collectively and individually: {{ scatterplot-graph: size=big + habitat=public + base-sites=collection:medical-pharma + view-structure-id=gemini-st ## Digital Experience Monitoring with Grafana Cloud: Session Replay, synthetic checks, and faster investigations DevFeed: [Digital Experience Monitoring with Grafana Cloud: Session Replay, synthetic checks, and faster investigations]() Original publisher: [Read original article]() Author: Bukola Ayodele Published: 2026-09-15T01:35:30.954353Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [digital experience monitoring](), [Grafana Cloud](), [Frontend observability](), [synthetic monitoring](), [real user monitoring](), [session replay](), [Instrumentation](), [web applications](), [JavaScript](), [Core Web Vitals](), [Traces]() Tags: [analytics](), [core-web-vitals](), [digital-experience-monitoring](), [frontend-observability](), [grafana](), [grafana-cloud](), [grafana-cloud-frontend-observability](), [instrumentation](), [javascript](), [logs](), [metrics](), [monitoring](), [observability](), [real-user-monitoring](), [session-replay](), [synthetic](), [synthetic-monitoring](), [traces](), [web-applications]() ### AI overview This article explains how Digital Experience Monitoring in Grafana Cloud combines Frontend Observability, Synthetic Monitoring, real user monitoring, and session replay. It shows how these capabilities help engineering teams detect issues proactively, understand their scope and root causes, correlate frontend signals with backend traces, and resolve production problems faster. ### Source excerpt When something breaks in production, the questions that matter most are also the toughest to answer from metrics alone: who was affected, what did they actually see, and is this worth waking someone up for? Answering those questions requires a fuller picture of the issue and its impact on your users. That's where Digital Experience Monitoring (DEM) in Grafana Cloud comes in. By combining Frontend Observability and Synthetic Monitoring, DEM connects real user experiences with proactive testing, helping engineering teams understand the scope of an issue, investigate its cause, and resolve it faster, all within Grafana Cloud. In this blog post, we'll walk through some of the latest DEM updates in Grafana Cloud, and how to get started. You can also learn more by watching the video below. First, what is Digital Experience Monitoring? Digital Experience Monitoring in Grafana Cloud gives you a complete picture of how users experience your web applications, from real user data to proactive synthetic checks. DEM helps your team achieve: Real user visibility: know how users truly experience your web application, not just what your backend metrics suggest. Proactive detection: catch problems before your users do, using automated checks against your critical user journeys. End-to-end correlation: connect a frontend signal to the backend trace behind it. Faster resolution: cut your mean time to recovery from hours to minutes. Session Replay: see exactly what your users saw Session Replay in Grafana Cloud Frontend Observability lets you visually replay what a user saw and did inside your web application. Your team can watch exactly what users experienced and correlate it with real user monitoring signals like Core Web Vitals, user actions, and traces, which makes it a powerful tool for investigating bugs and running root cause analysis. Session Replay is powered by Faro, Grafana's open source JavaScript instrumentation library for collecting real user monitoring data. Let's walk ## Product Engineering for PMs, Part 3: Build a SaaS App Without Coding DevFeed: [Product Engineering for PMs, Part 3: Build a SaaS App Without Coding]() Original publisher: [Read original article]() Author: Paweł Huryn Published: 2026-09-14T19:12:58Z Content type: tutorial Language: en Sources: [The Product Compass]() Topics: [Software as a service](), [web applications](), [stripe](), [Firewall](), [Security](), [agentic-engineering]() Tags: [agentic](), [application](), [coding](), [firewall](), [payments](), [saas](), [saas-app](), [security]() ### AI overview A tutorial for product managers on building a multi-tenant SaaS web application without coding, including real Stripe payments, a web application firewall, and agentic reviews focused on logic, security, and performance. ### Source excerpt Enable real Stripe payments, add a web application firewall (Cloudflare or Netlify), and run agentic reviews of a real multi-tenant SaaS app: logic, security, performance. No coding. ## Are Browser-Based Apps Enough for Web Designers? DevFeed: [Are Browser-Based Apps Enough for Web Designers?]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-09-13T19:09:47Z Content type: opinion Language: en Sources: [Speckyboy Design Magazine]() Topics: [web applications](), [Web platform](), [web-standards](), [Figma](), [Google]() Tags: [apps](), [browser](), [collaboration](), [design](), [design-business](), [freelance-career](), [freelance-design](), [privacy](), [software](), [tools](), [web](), [web-apps](), [web-design](), [web-designers](), [workflows]() ### AI overview Browser-based apps have matured enough to handle serious design, editing, and productivity work. The article considers their convenience and collaboration benefits, while also examining privacy concerns and cases where desktop tools remain preferable. ### Source excerpt Browser-based apps can now handle serious design, editing, and productivity work. We take a look at their convenience, collaboration benefits, privacy risks, and where desktop tools still make sense. The post Are Browser-Based Apps Enough for Web Designers? appeared first on Speckyboy Design Magazine. ## Primer on Jinja Templating DevFeed: [Primer on Jinja Templating]() Original publisher: [Read original article]() Author: Philipp Acsany Published: 2026-09-13T14:00:00Z Content type: tutorial Language: en Sources: [Real Python]() Topics: [Template](), [Python](), [web applications](), [Front end](), [Flask](), [modern web development](), [HTML](), [Django]() Tags: [building](), [code](), [content](), [django](), [features](), [framework](), [how-to](), [html](), [learn](), [learning](), [python](), [tutorial](), [web-applications]() ### AI overview A practical introduction to Jinja templating in Python. The tutorial covers installation, template creation and rendering, dynamic content, conditionals, loops, filters, macros, nesting, standalone text generation, and integration with Flask. ### Source excerpt With Jinja, you can build rich templates that power the front end of your web applications. But you can use Jinja without a web framework running in the background. Anytime you want to create text files with programmatic content, Jinja can help you out. ## Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability DevFeed: [Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability]() Original publisher: [Read original article]() Author: Lukasz Gut Published: 2026-09-12T11:22:06.456390Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [session replay](), [Grafana Cloud Frontend Observability](), [Frontend observability](), [web applications](), [telemetry](), [SDKs]() Tags: [analytics](), [frontend-observability](), [grafana](), [grafana-cloud-frontend-observability](), [instrumentation](), [logs](), [metrics](), [monitoring](), [observability](), [privacy](), [session-replay](), [telemetry](), [traces](), [web-applications]() ### AI overview The article introduces Session Replay, a public-preview add-on for Grafana Cloud Frontend Observability. It visually reconstructs how a web application appeared and changed during a user session, linking that playback to session timelines and technical telemetry so engineering teams can investigate frontend problems more directly. ### Source excerpt Grafana Cloud Frontend Observability helps engineering teams quantify the end user experience by bringing metrics, logs, traces, and user session context to client-side web applications. Teams can monitor application health and performance over time, triage errors, and correlate frontend signals with backend telemetry to investigate issues across the stack. Yet some of the hardest frontend problems remain difficult to diagnose. A support ticket might report that a checkout button did nothing, a form unexpectedly reset, or a workflow broke only in one browser or on one device. Metrics can reveal a performance regression, logs can capture an error, and traces can expose a slow request, but no single signal shows what the interface actually looked like to the user. This is exactly why we built Session Replay, an add-on feature in Frontend Observability that provides a visual reconstruction of a user's journey, connected to the telemetry Grafana Cloud already collects. It helps engineering teams move from a reported problem to seeing what happened and knowing exactly where to investigate next. What is Session Replay in Grafana Cloud Frontend Observability? Session Replay, now in public preview, adds visual playback capabilities to Frontend Observability. It reconstructs how a web application appeared and changed as a user navigated and interacted with it, so you can observe the journey as it unfolded instead of inferring it from individual telemetry events. Frontend Observability already brings together a chronological timeline of the events within a user session. That timeline tells you what happened and when. Session Replay adds the missing visual context: what was happening in the interface around those events and how one interaction led to the next. Because both views belong to the same session, you can move between the user experience and the relevant technical signals without losing the thread of your investigation. Session Replay builds on the Grafana Faro Web SD ## Adding Google Login to a React App with Auth0 DevFeed: [Adding Google Login to a React App with Auth0]() Original publisher: [Read original article]() Author: Carla Urrea Stabile Published: 2026-09-11T00:00:00Z Content type: tutorial Language: en Sources: [Auth0 Blog]() Topics: [Auth0](), [React](), [SDK](), [OAuth](), [OpenID connect (OIDC)](), [Vite](), [web applications](), [Node.js]() Tags: [auth0](), [authentication](), [google](), [node-js](), [oauth](), [oidc](), [react](), [sdk](), [tutorial](), [vite](), [web-applications]() ### AI overview A step-by-step tutorial for adding Google login to a Vite-based React application with Auth0. It covers installing the Auth0 React SDK, creating and configuring an Auth0 application, setting callback, logout, and web-origin URLs, and preparing credentials for production Google authentication. ### Source excerpt Add Google login to a React app with Auth0. A step-by-step tutorial from installing the Auth0 React SDK to configuring your own production Google credentials. ## Threat matrix: Mapping threats across cloud web applications DevFeed: [Threat matrix: Mapping threats across cloud web applications]() Original publisher: [Read original article]() Author: Microsoft Security Research and Lior Leizerovich Published: 2026-09-09T21:30:00Z Content type: article Language: en Sources: [Microsoft Security Blog]() Topics: [web applications](), [cloud-infrastructure](), [Microsoft]() Tags: [cloud](), [framework](), [mapping](), [microsoft](), [security](), [serverless](), [web-applications]() ### AI overview Microsoft introduces a MITRE ATT&CK-aligned threat matrix for cloud-hosted web applications and serverless platforms. The framework maps attack techniques to help security teams identify visibility gaps, prioritize hardening, and investigate threats across application and cloud layers. ### Source excerpt Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms. The post Threat matrix: Mapping threats across cloud web applications appeared first on Microsoft Security Blog. ## Accounts & Self-Service UX Research Update and Expansion: 3 Key Takeaways DevFeed: [Accounts & Self-Service UX Research Update and Expansion: 3 Key Takeaways]() Original publisher: [Read original article]() Author: Sally Collins Published: 2026-09-09T08:05:00Z Content type: article Language: en Sources: [Baymard Institute]() Topics: [User interface design](), [Authentication](), [passwords](), [MFA](), [web applications](), [password reset]() Tags: [article](), [authentication](), [insights](), [mobile](), [passwords](), [research](), [security](), [usability](), [web]() ### AI overview Baymard's updated Accounts & Self-Service UX research examines how ecommerce account experiences have changed since 2018. Based on more than 4,000 hours of research, 1,400 usability issues, and a survey of over 1,000 US adults, the article highlights account security and sign-in changes, including passkeys, one-time passcodes, and two-factor authentication. ### Source excerpt (Note: Unfortunately, e-mail and RSS don't support advanced layouts and features. If the graphics in this article look strange, you may want to read the article in your web browser.) Key Takeaways Baymard has new research on Accounts & Self-Service UX The research uncovered UX issues and identified UX solutions specific to the Accounts area of ecommerce sites Much has changed in account security and sign in, order management and tracking, and order returns since our last large-scale research in 2018 Key Stats 4,000+ new hours of Accounts & Self-Service research 1,400+ usability issues observed in testing 1,000+ US adults surveyed as part of our complementary quantitative research Today at Baymard, we're announcing the launch of our new updated and expanded Accounts & Self-Service UX research. We first investigated UX issues in Accounts & Self-Service in 2018. In this update, we've retested all the UX issues observed in 2018, verified all our UX solutions, wrote new guidelines based on newly observed Accounts & Self-Service UX issues, and rewritten the bulk of our verified guidelines for improved usefulness and clarity. This work has resulted in 57 new and updated Accounts & Self-Service guidelines based on 1,400+ usability issues observed during testing. The 57 guidelines are a key foundation for ensuring a high-performing Accounts and Self-Service UX. Additionally, we've included mobile test observations for the first time. As a result, this study represents our most comprehensive findings on Accounts & Self Service ecommerce UX. In this article, we'll highlight 3 high-level insights from our new Accounts & Self-Service UX research findings. New Insights for Accounts & Self-Service UX Compared to 2018, the landscape of Accounts & Self-Service has changed dramatically, particularly in 3 areas. 1) Account Security and Sign In At J.Crew, participants updating their passwords were provided no guidance regarding the site's password requirements, and they were unable to ## How Lorari scaled to 130+ fitness studios solo with Appwrite DevFeed: [How Lorari scaled to 130+ fitness studios solo with Appwrite]() Original publisher: [Read original article]() Author: Aditya Oberai Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Cloud](), [Development](), [web applications]() Tags: [analytics](), [backend](), [cloud](), [customer-stories](), [fitness](), [instagram](), [payments](), [software-development](), [stripe](), [web-app]() ### AI overview A customer story about solo founder Marti Mestre Faus building Lorari on Appwrite Cloud. The platform helps yoga, pilates, and fitness studios manage classes, memberships, payments, events, waitlists, and student bookings; more than 130 studios serving 13,000 students were onboarded in seven months. ### Source excerpt Learn how solo founder Marti Mestre Faus built Lorari on Appwrite Cloud and onboarded 130+ yoga and pilates studios serving 13,000 students in seven months. ## A countdown that stays accurate in a background tab DevFeed: [A countdown that stays accurate in a background tab]() Original publisher: [Read original article]() Author: Marko Published: 2026-09-05T06:30:19Z Content type: tutorial Language: en Sources: [Marko Denic Tech]() Topics: [web applications](), [client](), [Server]() Tags: [blog-for-developers](), [browsers](), [bug](), [build-faster](), [code-productivity](), [code-smarter](), [content-monetization](), [css-animation](), [css-performance](), [developer-growth](), [developer-resources](), [email-newsletter-for-coders](), [front-end-development](), [github-profile-automation](), [html](), [html-tips](), [http](), [javascript](), [javascript-tricks](), [learn-to-code](), [responsive-design-tips](), [server](), [ui](), [web-dev-newsletter](), [web-development](), [web-development-tips](), [weekly-dev-tips](), [workflow-optimization]() ### AI overview A tutorial on building accurate web countdowns despite background-tab timer throttling. It recommends calculating remaining time from an absolute deadline, forcing a render when a tab returns, and treating the server clock as the authority for consequential expirations. ### Source excerpt Your checkout timer says 4:55 when the cart already expired. Why background tabs break setInterval countdowns, and the three-line fix. ## ClickHouse as a streaming HTTP API DevFeed: [ClickHouse as a streaming HTTP API]() Original publisher: [Read original article]() Author: Mark Needham Published: 2026-09-05T00:00:00Z Content type: tutorial Language: en Sources: [ClickHouse Blog]() Topics: [web applications]() Tags: [api](), [architecture](), [clickhouse](), [data](), [features](), [how-to](), [http](), [streaming](), [validation]() ### AI overview A tutorial on using ClickHouse 26.8 to expose controlled queries as a streaming HTTP API with named HTTP handlers, access control, and result limits. ### Source excerpt Learn how to build a streaming HTTP API directly in ClickHouse 26.8 with named handlers, typed parameters, pagination, framing formats, and access control. ## Turn your app into an MCP server with the Appwrite OAuth2 server DevFeed: [Turn your app into an MCP server with the Appwrite OAuth2 server]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-04T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Model Context Protocol](), [OAuth 2.0](), [Authorization](), [Claude Code](), [Serverless](), [web applications](), [Databases]() Tags: [ai](), [ai-tools](), [app](), [auth](), [authorization](), [browser](), [claude](), [claude-code](), [code](), [databases](), [http](), [mcp](), [mcp-server](), [oauth2](), [remote-mcp-server](), [serverless](), [tutorial](), [tutorials](), [web](), [web-app]() ### AI overview This tutorial explains how to turn an Appwrite-based application into a remote MCP server. It uses an Appwrite Function, the OAuth2 server included in an Appwrite project, and a consent screen so AI tools such as Claude Code can access and act on behalf of signed-in users. ### Source excerpt Build a remote MCP server for your product, host it on Appwrite Functions, and let AI tools like Claude Code sign in through the OAuth2 server built into your Appwrite project. ## Build a memory MCP server on Appwrite DevFeed: [Build a memory MCP server on Appwrite]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-04T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Model Context Protocol](), [MCP Server](), [OAuth 2.0](), [Serverless](), [Databases](), [Embeddings](), [Claude Code](), [web applications]() Tags: [ai](), [ai-assistants](), [ai-tools](), [api](), [claude](), [claude-code](), [embeddings](), [mcp](), [mcp-server](), [memory](), [net](), [oauth2](), [sdk](), [serverless](), [tutorial](), [tutorials]() ### AI overview This tutorial builds Recall, a small persistent-memory app on Appwrite. It hosts a stateless remote MCP server in an Appwrite Function, stores embedded memories in VectorsDB for similarity search, and uses OAuth2 for user-authorized access. It also explains connecting Claude Code to the server. ### Source excerpt Give your AI tools a shared, persistent memory. Host a stateless MCP server on Appwrite Functions, store memories in VectorsDB, and protect it with your project's OAuth2 server. ## How to verify your Azure Application Gateway is zone-redundant DevFeed: [How to verify your Azure Application Gateway is zone-redundant]() Original publisher: [Read original article]() Author: Andre Newman Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Azure](), [Availability](), [Cloud](), [web applications](), [Command-line interface](), [Shared Responsibility Model]() Tags: [availability](), [azure](), [cli](), [cloud](), [features](), [high-availability](), [how-to](), [infrastructure](), [post](), [shared-responsibility](), [web-applications]() ### AI overview This how-to article explains availability-zone redundancy for Azure Application Gateway. It describes the redundancy model, the shared responsibility boundary, and how to verify whether a gateway is zone-redundant or zonal using Azure CLI and Resource Graph. It also cautions that a redundant gateway does not by itself make the services behind it redundant. ### Source excerpt This post explains what zone redundancy means for Application Gateway, how to confirm whether a given gateway is zone-redundant or zonal using the Azure CLI and Resource Graph, and why a gateway surviving a zone failure doesn't mean the services calling through it will. ## Incident response guide for AWS CloudTrail investigations - Part 2 DevFeed: [Incident response guide for AWS CloudTrail investigations - Part 2]() Original publisher: [Read original article]() Author: Oscar Diaz Published: 2026-09-03T21:15:53Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Incident response](), [AWS CloudTrail](), [AWS IAM](), [web applications]() Tags: [advanced-300](), [amazon-bedrock](), [aws](), [aws-cloudtrail](), [aws-identity-and-access-management-iam](), [best-practices](), [incident-response](), [security-blog](), [security-identity-compliance]() ### AI overview An incident-response guide for investigating AWS CloudTrail events through a multi-stage attack scenario. It traces an SSRF vulnerability on an EC2-hosted web application to IMDSv1 credential harvesting, IAM activity, and unauthorized Amazon Bedrock access across Regions. ### Source excerpt In Part 1 of this guide, we examined two common incident scenarios: cross-account Amazon Simple Storage Service (Amazon S3) data deletion with ransomware implications, and cryptocurrency mining deployed through AWS CloudFormation using exposed AWS Management Console credentials. We also introduced key incident response terminology and investigative frameworks for analyzing AWS CloudTrail events. In this second [...] ## How Turbopack chunks your JavaScript DevFeed: [How Turbopack chunks your JavaScript]() Original publisher: [Read original article]() Author: Sam Poder Published: 2026-09-03T16:00:00Z Content type: article Language: en Sources: [Next.js Blog]() Topics: [modern web development](), [Web Development](), [web applications]() Tags: [cache](), [code](), [compression](), [http](), [javascript](), [next-js]() ### AI overview The article explains how Turbopack groups JavaScript into chunks for Next.js applications. It examines the tradeoff between minimizing downloaded code and minimizing network requests, including the effects on caching and compression. ### Source excerpt Turbopack's chunking speeds up page loads and enables sharing code across pages. We shipped new experimental features to improve chunking in Next.js 16.3. ## Kotlin Toolchain 0.12: Multiplatform Library Publishing, Wasm Apps, and More DevFeed: [Kotlin Toolchain 0.12: Multiplatform Library Publishing, Wasm Apps, and More]() Original publisher: [Read original article]() Author: Joffrey Bion Published: 2026-09-03T10:40:05Z Content type: release Language: en Sources: [Kotlin : A concise multiplatform language developed by JetBrains | The JetBrains Blog]() Topics: [toolchain](), [multiplatform](), [compose-hot-reload](), [web applications](), [Spring Boot 4]() Tags: [compose-hot-reload](), [gradle](), [intellij-idea](), [kotlin](), [multiplatform](), [news](), [publication](), [releases](), [toolchain](), [toolchains](), [wasm]() ### AI overview Kotlin Toolchain 0.12.0 adds multiplatform library publishing and previews support for building Wasm modules as web applications. It also includes command-line Compose Hot Reload and changes intended to reduce Maven Central publication files. ### Source excerpt Kotlin Toolchain 0.12.0 is out. This release brings some long-awaited features: multiplatform libraries publication, a preview of Wasm application support, Compose Hot Reload from the command line, and more. Read on for the details, and check the release notes for the full list of changes and bug fixes. Additionally, klibs.io now uses the Kotlin Toolchain [...] ## Telco UX Benchmark: 3,100+ Performance Scores and 2,400+ Best Practice Examples DevFeed: [Telco UX Benchmark: 3,100+ Performance Scores and 2,400+ Best Practice Examples]() Original publisher: [Read original article]() Author: Anders Nielsen Published: 2026-09-01T08:45:00Z Content type: article Language: en Sources: [Baymard Institute]() Topics: [web applications](), [GUI]() Tags: [article](), [benchmark](), [case-studies](), [comparison](), [ecommerce](), [mobile](), [performance](), [research](), [testing](), [ux](), [web]() ### AI overview Baymard presents a Telco UX benchmark based on seven case studies, manually assessed across more than 500 research-based parameters. The benchmark reports poor overall UX performance and highlights unclear plan and specification labels, weak comparison tools, missing contract and device terms, and incomplete warranty, returns, shipping, delivery, and discount information. ### Source excerpt (Note: Unfortunately, e-mail and RSS don't support advanced layouts and features. If the graphics in this article look strange, you may want to read the article in your web browser.) At Baymard, we've just released a new UX benchmark with 7 "Telco" UX case studies. This follows from our large-scale user testing on Telco UX and adds to our existing ecommerce UX benchmark. In this article, we give you a snapshot of the overall UX performance. 7 Telco UX Case Studies and the Overall Performance AT&T mediocre Telco 51 page designs: desktop, mobile Xfinity poor Telco 47 page designs: desktop, mobile Lebara poor Telco 45 page designs: desktop, mobile Orange poor Telco 56 page designs: desktop, mobile Vodafone UK poor Telco 49 page designs: desktop, mobile Bell poor Telco 44 page designs: desktop, mobile Verizon poor Telco 49 page designs: desktop, mobile YourSite.com? Want to know how your site performs? Get Premium access to review your own site or have it audited by Baymard researchers. These are the 7 in-depth Telco UX case studies. The 7 Telco sites have been manually assessed across 500+ research-based UX parameters relevant to Telco providers, resulting in 3,100+ weighted UX performance scores and 2,400+ best practice examples from these desktop and mobile sites. Each of the 3,100+ UX performance scores from the 7 Telco case studies is summarized in the interactive scatterplot below -- showing you how they perform collectively and individually: {{ scatterplot-graph: size=big + habitat=public + base-sites=collection:telco + view-structure-id=gemini-st_47eezi8l }} The overall UX performance of the Telco sites is "poor," with only 1 site in the "mediocre" range. Here are some of the overarching UX issues. On the benchmarked sites, proprietary plan names and technical specifications were presented as labels without explanation. No site explained its industry-specific filters or provided inline help for technical specifications within comparison features, and plan feature ## A Starlette middleware guide for FastAPI and Python developers DevFeed: [A Starlette middleware guide for FastAPI and Python developers]() Original publisher: [Read original article]() Author: Aditya Raj Published: 2026-08-28T07:00:00Z Content type: tutorial Language: en Sources: [Honeybadger]() Topics: [FastAPI](), [Python](), [ASGI](), [web applications](), [Cross-origin resource sharing (CORS)]() Tags: [auth](), [cors](), [developers](), [fastapi](), [guide](), [logging](), [middleware](), [python](), [python-articles](), [starlette](), [web-applications]() ### AI overview This guide explains how middleware works in Starlette and FastAPI applications. It covers built-in middleware, custom middleware using pure ASGI and BaseHTTPMiddleware, and execution order when multiple middleware layers process requests and responses. ### Source excerpt Starlette middlewares let you apply logging, auth, and CORS across every route in a web app without duplicating code. This article covers Starlette's built-in middlewares, building custom ones with pure ASGI and BaseHTTPMiddleware, and the execution-order rules that keep your FastAPI applications secure and fast. Read on to learn how to build and order Starlette middlewares the right way. ## Tailscale PAM beta: Manage connectivity and privileged access in one place DevFeed: [Tailscale PAM beta: Manage connectivity and privileged access in one place]() Original publisher: [Read original article]() Author: Smriti Sharma Published: 2026-08-27T14:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [Authorization](), [Security](), [Kubernetes](), [OpenSSH](), [API](), [Databases](), [web applications](), [incident]() Tags: [api](), [compliance](), [databases](), [external](), [identity](), [incident](), [infrastructure](), [kubernetes](), [logs](), [production](), [security](), [servers](), [slack](), [ssh](), [web-applications]() ### AI overview Tailscale PAM beta brings privileged access management into the Tailscale admin console. It provides resource-specific access policies, just-in-time approvals through Slack, and session logs and recordings for audits and investigations across databases, servers, Kubernetes clusters, and web applications. ### Source excerpt Just-in-time access, resource policies, and session auditing, right where you need them. [Next page]()