All the articles with the tag "security".
Practical iframe security: what actually goes wrong and how to lock things down without breaking your app.
IAM is boring but necessary. Here's the 5-minute version.