Brennenstuhl on Security

On 18 September 2026, Magnus Jungsbluth and I presented the Agentic Identity Broker at AGNTCon + MCPCon Europe in Amsterdam.

I recently gave a guest lecture to the cybersecurity course at Hochschule für Technik und Wirtschaft Berlin (HTW).

An organization with 500 engineering teams rarely has a single way to build, deploy, and operate services.

On March 31, 2026, North Korean state actors compromised Axios, an npm package with over 70 million weekly downloads.

Agentic engineering is collapsing the Software Development Life-Cycle (SDLC) into fast, autonomous loops.

I recently migrated my personal JAMstack projects from Github and Netlify to European alternatives.

Bunny.net launched the Bunny Shield Preview earlier this year.

Although technically no longer necessary, the www subdomain is deeply ingrained in internet history and user habits.

Definition of JWA JSON Web Algorithms (JWA) is a specification providing a list of cryptographic algorithms.

TL;DR JWKS (JSON Web Key Set) is a tool for standardizing the representation and management of cryptographic keys via a JSON object.

TL;DR JSON Web Encryption (JWE) is a standard for securing data transmission between parties, providing confidentiality, integrity, and authentication.

TL;DR OAuth 2.0 is an open standard that describes an authorization framework.

Disclaimer: This article involved collaboration with a GenAI tool for personal research.

Disclaimer: This article involved collaboration with a GenAI tool for personal research.

Security measures are effective when they cause the least friction while providing the highest level of security necessary for the targeted, user-friendly business process.

Introduction to Password Attacks Cybercriminals continuously seek new ways to gain account access and exploit security flaws as technology progresses.

Passkeys are currently on everyone’s lips, thanks to recent announcements to enable Passkeys for authentication on Google accounts.

In the context of internet security, implementing passwordless authentication really is a game changer.

Strong passwords are necessary for securing user accounts and protecting sensitive data.

Today, digital security is more important than ever.

Disclaimer: This article involved collaboration with a GenAI tool for personal research.

Importance of Password Policy Best Practices In today’s digital landscape, both password management and security are more important than ever before.

Do you ever get tired of manually typing in your login credentials every time you need to access an online account?

As programmers, we probably use strings more than any other type of data structure.

The demand for reliable and effective authentication methods has increased in the modern, distributed, and fast-paced digital world.

Often supporting open source software is just fixing one tiny thing you stumbled upon.

Finally, I managed to come up with a name for my regular reading tips series which will feature both, latest info around recent events & incidents (especially when it comes to identity and security topics) as well as long running articles I strongly advice

Understanding JSON Web Tokens Welcome to the future of authentication!

“Amazon DynamoDB is a fully managed NoSQL database service […]”.

Microservices have revolutionized the way we develop and deploy software applications.

AWS CloudFormation (CFN) is a file-based interface for provisioning AWS resources and in that way is Amazons answer on the ‘Infrastructure as Code’ paradigm.

Using Python Docopt (for beautiful command-line interfaces) I recently had the problem of converting a list of tuples into a dictionary.

Today I’d like to share my solution for a common problem a lot of IT companies experience when finally moving from Subversion (SVN) to Git as their central version control system (VCS): Converting a SVN repository into a Git repo including its commit hist…

On Github, every organization with a fast growing open-source codebase quickly figures out a couple of shortcomings regarding the Github web interface.

With Ireland and Frankfurt being available as AWS regions nowadays, Amazon (more or less) tried to extinguish EU and especially German legal concerns regarding storage and processing of privacy-related data.