Cyber Coffee · The English editions
Practical perspectives on application security, engineering and the decisions behind safer software.
Written by Lucas Rocha ↙
Latest edition
RBAC fails over time without regular maintenance. Learn how to model roles around functions, enforce least privilege, conduct periodic access reviews, and maintain auditable access logs.
Read article
BOLA occurs when APIs check token validity but fail to verify object ownership. Discover why it tops OWASP lists and how continuous CI testing catches it early.
Read article
Prompt injection cannot be patched because LLMs cannot separate data from instructions. True defense requires architecture outside the model: least privilege, treating output as untrusted, and human approval for irreversible actions.
Read article
Managed identities, centralized secrets and automatic rotation instead of static credentials.
Read article
Trust boundaries, Server Actions and handling sensitive data in modern React applications.
Read article
Turn a list of risks into an actionable plan your team can deliver, with results you can demonstrate.
Read articleData integrity between frontend and backend is a critical blind spot in regulated products. Here is how to prevent silent divergence and flawed decisions.
Read article