DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
When Projects Fail: Why Companies Should Treat Open Source as Infrastructure

When Projects Fail: Why Companies Should Treat Open Source as Infrastructure

38
Comments
4 min read
I built an open source Bitcoin AML forensics tool in TypeScript that runs on Android

I built an open source Bitcoin AML forensics tool in TypeScript that runs on Android

Comments
2 min read
How I Built an AI That Breeds Its Own Jailbreaks Using Genetic Algorithms

How I Built an AI That Breeds Its Own Jailbreaks Using Genetic Algorithms

6
Comments
3 min read
GHSA-46FP-8F5P-PF2M: GHSA-46fp-8f5p-pf2m: XSS Filter Bypass via Improper HTML Entity Decoding in Loofah allowed_uri?

GHSA-46FP-8F5P-PF2M: GHSA-46fp-8f5p-pf2m: XSS Filter Bypass via Improper HTML Entity Decoding in Loofah allowed_uri?

Comments
2 min read
IAM Permissions Are Confusing

IAM Permissions Are Confusing

3
Comments
2 min read
Missing from the MCP debate: Who holds the keys when 50 agents access 50 APIs?

Missing from the MCP debate: Who holds the keys when 50 agents access 50 APIs?

20
Comments
3 min read
The Solana CPI Security Playbook: 7 Cross-Program Invocation Patterns That Prevent Nine-Figure Exploits

The Solana CPI Security Playbook: 7 Cross-Program Invocation Patterns That Prevent Nine-Figure Exploits

Comments
5 min read
Your Pre-Production Server Is on the Public Internet. Here's How to Fix That

Your Pre-Production Server Is on the Public Internet. Here's How to Fix That

Comments
11 min read
The 270 Million iPhone Crypto Heist: How DarkSword's Hit-and-Run Exploit Kit Drains Wallets in Under 60 Seconds

The 270 Million iPhone Crypto Heist: How DarkSword's Hit-and-Run Exploit Kit Drains Wallets in Under 60 Seconds

Comments
8 min read
The $40M Key Management Failure: What Every DeFi Team Must Learn From Step Finance's Operational Security Collapse

The $40M Key Management Failure: What Every DeFi Team Must Learn From Step Finance's Operational Security Collapse

Comments
6 min read
The Restaking Trap: How EigenLayer's Compounded Slashing Risk Could Cascade Into Ethereum's First Systemic DeFi Crisis

The Restaking Trap: How EigenLayer's Compounded Slashing Risk Could Cascade Into Ethereum's First Systemic DeFi Crisis

Comments
7 min read
I Gave an AI Agent My Deploy Keys for 30 Days. Here's the Incident Report.

I Gave an AI Agent My Deploy Keys for 30 Days. Here's the Incident Report.

Comments
10 min read
EIP-7702 Broke Your tx.origin Check: How Ethereum's Pectra Upgrade Created a New Class of Account Confusion Vulnerabilities

EIP-7702 Broke Your tx.origin Check: How Ethereum's Pectra Upgrade Created a New Class of Account Confusion Vulnerabilities

Comments
7 min read
Drupal AI Vulnerability Guardian: Triage 12 Vulnerability Patterns at Machine Speed

Drupal AI Vulnerability Guardian: Triage 12 Vulnerability Patterns at Machine Speed

Comments
5 min read
Top 5 AI Agent Auth Tools in 2026

Top 5 AI Agent Auth Tools in 2026

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.