> Canonical URL: https://codingcat.dev/topic/security

# Security Courses, Podcasts & Blog Posts | CodingCat.dev

🛡️ DevOps & Architecture Hub

# Security.

OAuth 2.1, Passkeys, RBAC, Supply-Chain Hardening & Zero Trust

Explore CodingCat.dev hands-on courses, video lessons, podcast episodes, and technical deep-dive blog posts covering Security: OAuth 2.1, Passkeys, RBAC, Supply-Chain Hardening & Zero Trust.

[Search All Security Content](/search?q=Security)![Security official logo](/logos/tags/security-lockup-light.svg)![Security official logo](/logos/tags/security-lockup-dark.svg)Official Security Brand Lockup (2 Blog Posts · 5 Episodes)✏️ Security Production Architecture Diagram✓ Good PatternVISUAL DIAGRAM[Diagram Walkthrough]How Security fits into a modern, type-safe full-stack production architecture on CodingCat.dev.AAA Contrast Verified

## Security Blog Posts.

Showing 2 of 2 blog postsFiltered: Security[Open Full Topic Hub →](/topic/security)[![PHP2Shell (CVE-2026-109618): How AI Found a Decade-Old Bug in 70% of the Web](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/e83065d0a4e2f841ce64d3f4aea8ddbbf07e5cb9-1376x768.jpg?w=1376&q=82&fit=max&auto=format)](/post/php2shell-cve-2026-109618-ai-php-security-scramble)October 22, 2026[![](/logos/tags/aws-symbol-light.svg)![](/logos/tags/aws-symbol-dark.svg)AWS](/topic/aws)[![](/logos/tags/php-symbol-light.svg)![](/logos/tags/php-symbol-dark.svg)PHP](/topic/php)

### [PHP2Shell (CVE-2026-109618): How AI Found a Decade-Old Bug in 70% of the Web](/post/php2shell-cve-2026-109618-ai-php-security-scramble)

Two critical pre-authentication RCE flaws in PHP (CVE-2026-109618 and CVE-2026-109619), uncovered by AI models from OpenAI and Google Gemini, sparked a global patching scramble across 70% of the web. Here is how PHP2Shell works and how to patch your servers.

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Triple-layer security for Firebase web apps: Web Architecture & Implementation Guide](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/9ab8cfe36d4309e12a606c5516554897a01000e0-1200x630.svg?w=1200&q=82&fit=max&auto=format)](/post/firebase-2026-07-three-layer-security)July 31, 2026[![](/logos/firebase/firebase-symbol.png)![](/logos/firebase/firebase-symbol.png)Firebase](/topic/firebase)[![](/logos/tags/google-cloud-symbol-light.svg)![](/logos/tags/google-cloud-symbol-dark.svg)Google Cloud](/topic/google-cloud)

### [Triple-layer security for Firebase web apps: Web Architecture & Implementation Guide](/post/firebase-2026-07-three-layer-security)

Alex Patterson's hands-on web engineering breakdown of "Triple-layer security for Firebase web apps" (2026-07-30). Learn how to wire up Firebase, Google Cloud, Web Dev, TypeScript in production web apps.

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)

No matching blog posts found for this filter.

Try clearing the filter above to browse the full feed.

Loading more blog posts...✓ All blog posts loaded

## Security Podcast Episodes.

Showing 5 of 5 episodesFiltered: Security[Open Full Topic Hub →](/topic/security)[![How OAuth, MCP, and the OpenAI Apps SDK, Power the Next Generation of Interactive AI Experiences (with Stytch & OpenAI)](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/0beb99900f4c24e284df2dee3e2d740062c6ce96-1920x1080.png?w=1920&q=82&fit=max&auto=format)](/podcast/how-oauth-mcp-and-the-openai-apps-sdk-power-the-next-generation-of-interactive-ai-experiences)November 4, 2025[![](/logos/tags/ai-symbol-light.svg)![](/logos/tags/ai-symbol-dark.svg)AI & Agents](/topic/ai)[![](/logos/tags/mcp-symbol-light.svg)![](/logos/tags/mcp-symbol-dark.svg)MCP](/topic/mcp)

### [How OAuth, MCP, and the OpenAI Apps SDK, Power the Next Generation of Interactive AI Experiences (with Stytch & OpenAI)](/podcast/how-oauth-mcp-and-the-openai-apps-sdk-power-the-next-generation-of-interactive-ai-experiences)

Curious about OAuth, MCP servers, and building cool ChatGPT apps? Hear from Max of Stytch as we dive deep, break down the tech, and build a Tamagotchi together!

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Max Gerber](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/4497bb7ada0e39b4cd13b0e3ca00c930389dab02-1292x1088.png?rect=102,0,1088,1088&w=96&h=96&q=82&fit=max&auto=format)Max Gerber](/guest/max-gerber)[![Identity in AI Agents](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/b6824741d5542b93999d8f9be4ffef11e37dc52b-1920x1080.png?w=1920&q=82&fit=max&auto=format)](/podcast/identity-access-management-for-agents-with-tobin-south)October 23, 2025[![](/logos/tags/ai-symbol-light.svg)![](/logos/tags/ai-symbol-dark.svg)AI & Agents](/topic/ai)[![](/logos/tags/mcp-symbol-light.svg)![](/logos/tags/mcp-symbol-dark.svg)MCP](/topic/mcp)

### [Identity in AI Agents](/podcast/identity-access-management-for-agents-with-tobin-south)

Explore AI identity management with expert insights on MCP servers, agent security, OAuth, and future standards in AI. Unlock best practices and industry trends.

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Tobin South](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/3e6022a4054dfc1006beee15f8f477da7532aca8-925x876.png?rect=25,0,876,876&w=96&h=96&q=82&fit=max&auto=format)Tobin South](/guest/tobin-south)[![Firebase Security Rules: Effortless control over your app](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/3d5fa42c489cd7f673ce2c4aa96db4ef5a31aa72-1920x1080.png?w=1920&q=82&fit=max&auto=format)](/podcast/firebase-security-rules-effortless-control-over-your-app-s-data)April 6, 2024[![](/logos/firebase/firebase-symbol.png)![](/logos/firebase/firebase-symbol.png)Firebase](/topic/firebase)[![](/logos/tags/database-symbol-light.svg)![](/logos/tags/database-symbol-dark.svg)Databases](/topic/database)

### [Firebase Security Rules: Effortless control over your app's data.](/podcast/firebase-security-rules-effortless-control-over-your-app-s-data)

Firebase Security Rules are a powerful feature that allows you to control access to your app's data in Firebase Realtime Database, Cloud Firestore, and Cloud Storage.

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Michael Dowden](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/1b2614bd091b93ad55167e1e767025991ed798fa-800x800.jpg?w=96&h=96&q=82&fit=max&auto=format)Michael Dowden](/guest/michael-dowden)[![Fully Passwordless Authentication with Passage](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/e134911c7d058f8ea59f9d5ec94dddc6b67cae1d-1920x1080.jpg?w=1920&q=82&fit=max&auto=format)](/podcast/2-48-Fully-Passwordless-Authentication-with-Passage)December 20, 2022[![](/logos/tags/security-symbol-light.svg)![](/logos/tags/security-symbol-dark.svg)Security](/topic/security)

### [Fully Passwordless Authentication with Passage](/podcast/2-48-Fully-Passwordless-Authentication-with-Passage)

Nick Hodges talk all about how you can go fully passwordless to reduce friction for your users and provide best-in-class security, including biometrics.

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Brittney Postma](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/f25e504779cb6ebb7c0dd7df367f2c7490e17784-735x735.png?w=96&h=96&q=82&fit=max&auto=format)Brittney Postma](/author/brittney-postma)[![Nick Hodges](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/793dd0a62c0c18273c2964c02e4433f36c1eef7f-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Nick Hodges](/guest/nick-hodges)[![Jamstack Handbook by Colby Fayock](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/046b909d79f07624af525f7131af64525728cabe-1920x1080.png?w=1920&q=82&fit=max&auto=format)](/podcast/1-6-jamstack-handbook-with-colby-fayock)January 1, 2021[![](/logos/tags/security-symbol-light.svg)![](/logos/tags/security-symbol-dark.svg)Security](/topic/security)[![](/logos/tags/serverless-symbol-light.svg)![](/logos/tags/serverless-symbol-dark.svg)Serverless](/topic/serverless)

### [Jamstack Handbook by Colby Fayock](/podcast/1-6-jamstack-handbook-with-colby-fayock)

Talking with Colby Fayock we dive into Jamstack security, Jamstack ecommerce, and much more!

[![Alex Patterson](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Brittney Postma](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/f25e504779cb6ebb7c0dd7df367f2c7490e17784-735x735.png?w=96&h=96&q=82&fit=max&auto=format)Brittney Postma](/author/brittney-postma)[![Colby Fayock](https://cdn.sanity.io/media-libraries/mlttp0BZbCpV/images/c62723671f45393131cf552976d6ee36569da91a-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Colby Fayock](/guest/colby-fayock)

No matching episodes found for this filter.

Try clearing the filter above to browse the full feed.

Loading more episodes...✓ All episodes loaded