DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Microsoft confie 90 % de sa chasse aux failles à un mini-modèle
thibault_monteiro profile

Microsoft confie 90 % de sa chasse aux failles à un mini-modèle

#agents #ai #cybersecurity #microsoft
Comments
6 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
rxkov profile
Rxkov

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access
rxkov profile
Rxkov

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

#backend #cybersecurity #devops #security
Comments
4 min read
🇮🇳 Building OmniCore OS: From an Idea to a Working Development Build:
rakshanex profile

🇮🇳 Building OmniCore OS: From an Idea to a Working Development Build:

#cybersecurity #opensource #linux #devops
Comments
3 min read
Webhook Signature Bypass: When the Receiver Skips the HMAC Check
rxkov profile
Rxkov

Webhook Signature Bypass: When the Receiver Skips the HMAC Check

#api #backend #cybersecurity #security
Comments
5 min read
HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control
rxkov profile
Rxkov

HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

#api #backend #cybersecurity #security
Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately
rxkov profile
Rxkov

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

#api #backend #cybersecurity #security
Comments
6 min read
API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin
rxkov profile
Rxkov

API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin

#api #architecture #cybersecurity #security
Comments
5 min read
API Key Rotation Leaves Three Records Untouched: Git History, Access Logs, and the Attacker Who Watched the Fix Commit
rxkov profile
Rxkov

API Key Rotation Leaves Three Records Untouched: Git History, Access Logs, and the Attacker Who Watched the Fix Commit

#cybersecurity #git #github #security
Comments
5 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint
rxkov profile
Rxkov

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

#api #backend #cybersecurity #security
Comments
5 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention
rxkov profile
Rxkov

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

#backend #cybersecurity #infosec #security
1
Comments
5 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials
rxkov profile
Rxkov

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

#api #cybersecurity #infosec #security
Comments
6 min read
HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways
rxkov profile
Rxkov

HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways

#api #cybersecurity #networking #security
Comments
5 min read
Working: Math.random() Is Not Your Friend: PRNG Prediction and Timing Attacks in API Tokens
rxkov profile
Rxkov

Working: Math.random() Is Not Your Friend: PRNG Prediction and Timing Attacks in API Tokens

#cybersecurity #javascript #security
Comments
5 min read
SAML XSW: Signatures That Validate the Wrong Element
rxkov profile
Rxkov

SAML XSW: Signatures That Validate the Wrong Element

#authentication #cybersecurity #infosec #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.