DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Reading the CVSS 9.8 score of CVE-2026-108474 without overreading it

Reading the CVSS 9.8 score of CVE-2026-108474 without overreading it

Comments
2 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

Comments
6 min read
Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

Splitting the lethal trifecta fixes it

Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

26
Comments 75
15 min read
What to answer when the questionnaire asks 'is MFA enforced for all users?'

What to answer when the questionnaire asks 'is MFA enforced for all users?'

Comments
2 min read
BOLA: your API checks the URL but misses IDs in the JSON body

BOLA: your API checks the URL but misses IDs in the JSON body

Comments
9 min read
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-15748 Explained: How One Pipe Character Broke an "Exact Match" Blocklist

CVE-2026-15748 Explained: How One Pipe Character Broke an "Exact Match" Blocklist

Comments
5 min read
Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Comments
2 min read
I Built a Free Browser-Based Log Analyzer — Here's Why

I Built a Free Browser-Based Log Analyzer — Here's Why

Comments
1 min read
Setting a VAPT Schedule for Connected Manufacturing Environments

Setting a VAPT Schedule for Connected Manufacturing Environments

Comments
2 min read
CPCSC physical security: access control and CCTV

CPCSC physical security: access control and CCTV

Comments
4 min read
Understanding PDF Incremental Updates (%%EOF Chains): How Appended Byte Streams Leak Deleted Data

Understanding PDF Incremental Updates (%%EOF Chains): How Appended Byte Streams Leak Deleted Data

Comments
9 min read
Pacing the Frontier Explained: What Amodei’s Slowdown Proposal Means for Operators

Pacing the Frontier Explained: What Amodei’s Slowdown Proposal Means for Operators

Comments
6 min read
AI Agents Hacking Online Retailers: 600,000 Card Records Stolen

AI Agents Hacking Online Retailers: 600,000 Card Records Stolen

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.