Insights

Engineering Insights

Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.

RSS

Curated links from external sources — not 360Softy original articles.

ExternalAI

AWS Machine Learning Blog13 Jul 2026

Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway

Building multi-tenant agents with Amazon Bedrock AgentCore and Apply fine-grained access control with Bedrock AgentCore Gateway interceptors establish the conceptual foundation for on-behalf-of (OBO) token exchange in agentic systems. This post is the implementation guide. It walks through a complete multi-tenant OBO setup against Okta, shows the JSON Web Token (JWT) claim transformations on each hop, and demonstrates how audience binding produces defense in depth that scales across tenants.

Advanced (300)Amazon Bedrock AgentCoreTechnical How-to

AWS Machine Learning BlogRead original

ExternalTechnology Trends

Ars Technica13 Jul 2026

Apple and Samsung benefit as memory shortage pushes smartphone shipments to historic lows

The biggest smartphone makers keep on trucking in the face of component shortages and economic uncertainty.

TechappleArtificial Intelligence

Ars TechnicaRead original

External

The Hacker News13 Jul 2026

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty allow-list kept it switched off, and no proof has emerged that it ever gathered or sent a single browsing domain. The

The Hacker NewsRead original

ExternalTechnology Trends

Hacker News13 Jul 2026

A Second-Grade Teacher Revived a Beloved Video Game

Comments

Hacker NewsRead original

ExternalSoftware Engineering

DZone13 Jul 2026

Machine Identity Debt: Why Human Identity Is No Longer Cloud Security's Primary Boundary

Cloud-native systems now create far more machine identities than human ones. Security strategies built around workforce identity are no longer sufficient. Here's what engineering leaders should build instead. The Breach That Didn't Need a Password On August 8, 2025, a threat actor now tracked by Google's Threat Intelligence Group as UNC6395 began quietly moving through the Salesforce instances of hundreds of companies. No phishing email landed in an inbox that day. No password was cracked. No mu

DZoneRead original

ExternalCybersecurity

Microsoft Security Blog13 Jul 2026

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read about how to prepare. The post Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID appeared first on Microsoft Security Blog.

Microsoft Security BlogRead original

ExternalCybersecurity

Dark Reading13 Jul 2026

GigaWiper Lets Threat Actors Choose Their Own Destructive Attack

A modular implant borrows from various malware families to combine both backdoor and wiper activities to maximize impact and minimize operational output.

Dark ReadingRead original

ExternalTechnology Trends

Ars Technica13 Jul 2026

Colorado will decide whether a "right to natural gas" is added to state constitution

The amendment would restrict building codes that promote electrification.

PolicyColoradonatural gas

Ars TechnicaRead original

Work with 360Softy

Building a SaaS product, AI system, or business platform?

Book a free consultation and we will tell you honestly whether we can help.

Book a consultation View our services →