DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your Agent Has a Side Door: Testing MCP Policy Beyond the Tool List

Community adds risks like hidden npx installs
bengreenberg profile

Your Agent Has a Side Door: Testing MCP Policy Beyond the Tool List

#ai #mcp #security #automation
6
Picked as gem Comments 6
4 min read
Codex Was Torching Your SSD and Nobody Noticed for Months

Small files mask massive flash wear
varshithvhegde profile

Codex Was Torching Your SSD and Nobody Noticed for Months

#codex #security #devops #productivity
15
Comments 12
10 min read
Moonwell Exploit: A Donation That Skipped the MAMO Cap
pandasecurity profile

Moonwell Exploit: A Donation That Skipped the MAMO Cap

#security #blockchain #defi #solidity
Comments
8 min read
RFC 6238 by Hand: One TOTP Code, 18 Vectors, and the 32-Byte Key Trap
kassol profile
WGG

RFC 6238 by Hand: One TOTP Code, 18 Vectors, and the 32-Byte Key Trap

#security #authentication #node #webdev
Comments
5 min read
What the heck do I alert on anymore?
allenheltondev profile

What the heck do I alert on anymore?

#aiagents #agents #security
Comments
8 min read
We read the Supabase migrations of 512 Lovable apps: 16% let signed-out visitors rewrite a whole table
ohadkr profile

We read the Supabase migrations of 512 Lovable apps: 16% let signed-out visitors rewrite a whole table

#supabase #postgres #security #lovable
Comments
4 min read
How to safely run a take-home coding test (fake recruiter red flags after the Binance case)
renandlsantos_ai profile

How to safely run a take-home coding test (fake recruiter red flags after the Binance case)

#security #career #javascript #interview
Comments
5 min read
Indirect Prompt Injection: How to Protect Your AI Agent with Spotlighting and Prompt Shields
carlosjcastrog profile

Indirect Prompt Injection: How to Protect Your AI Agent with Spotlighting and Prompt Shields

#ai #security #azure #llm
Comments
8 min read
Anthropic's FlashProve Proves Which Model Answered You, at 70-95x vLLM's GPU Time
gabrielanhaia profile

Anthropic's FlashProve Proves Which Model Answered You, at 70-95x vLLM's GPU Time

#ai #llm #security #opensource
Comments
7 min read
Building a Federated Copilot: Part 1, Identity Before Integration
darkedges profile

Building a Federated Copilot: Part 1, Identity Before Integration

#security #ai #oauth #typescript
Comments
6 min read
Lovable Data Leak 2026: 24,664 AI Apps Exposed 80,000+ User Records via Supabase
yashvikothari profile

Lovable Data Leak 2026: 24,664 AI Apps Exposed 80,000+ User Records via Supabase

#lowcode #security #supabase #cloud
Comments
4 min read
Autorização ABAC no ASP.NET Core: indo além das roles
guigovaski profile

Autorização ABAC no ASP.NET Core: indo além das roles

#security #dotnet
Comments
12 min read
The state of MCP auth, November 2026: I scanned 25 public servers
godsmasher profile

The state of MCP auth, November 2026: I scanned 25 public servers

#mcp #security #opensource #typescript
Comments 1
3 min read
Stop Pasting Production Secrets Into Web Calculators: Subnet, chmod and Cron Math You Can Do Offline
asad_ali profile

Stop Pasting Production Secrets Into Web Calculators: Subnet, chmod and Cron Math You Can Do Offline

#security #devops #linux #networking
Comments
8 min read
Building ScamShield AI: Week 2 — Docker Security, Firewall Bypasses, and Fail-Closed Architecture
siddharthrane07 profile

Building ScamShield AI: Week 2 — Docker Security, Firewall Bypasses, and Fail-Closed Architecture

#security #docker #devops #python
Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.