DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access
rxkov profile
Rxkov

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

#backend #cybersecurity #devops #security
Comments
4 min read
SAML XSW: Signatures That Validate the Wrong Element
rxkov profile
Rxkov

SAML XSW: Signatures That Validate the Wrong Element

#authentication #cybersecurity #infosec #security
Comments
5 min read
API Log Redaction: Filtering After Serialization Does Not Work
rxkov profile
Rxkov

API Log Redaction: Filtering After Serialization Does Not Work

#api #architecture #cybersecurity #security
Comments
5 min read
CORS Misconfiguration in APIs: Why Reflected Origin Plus Credentials Is the Dangerous Pattern, Not Wildcard
rxkov profile
Rxkov

CORS Misconfiguration in APIs: Why Reflected Origin Plus Credentials Is the Dangerous Pattern, Not Wildcard

#api #cybersecurity #infosec #security
Comments
6 min read
XXE in Document-Processing APIs: The Attack Surface Nobody Hardens
rxkov profile
Rxkov

XXE in Document-Processing APIs: The Attack Surface Nobody Hardens

#cybersecurity #infosec #security
Comments
5 min read
Wayback Machine for OSINT: What Stayed Archived After Remediation
rxkov profile
Rxkov

Wayback Machine for OSINT: What Stayed Archived After Remediation

#cybersecurity #infosec #security
Comments
5 min read
JavaScript File Recon: How Frontend Bundles Expose Endpoints, API Keys, and Business Logic
rxkov profile
Rxkov

JavaScript File Recon: How Frontend Bundles Expose Endpoints, API Keys, and Business Logic

#cybersecurity #frontend #javascript #security
Comments
5 min read
SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE
rxkov profile
Rxkov

SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE

#api #backend #cybersecurity #security
Comments
5 min read
What is Secure Boot - and Why Every IoT Device Needs It
artem_sulyma profile

What is Secure Boot - and Why Every IoT Device Needs It

#iot #cybersecurity
1
Comments
7 min read
API SSRF: Allowlists Fail Because They Validate the URL, Not the Resolved IP
rxkov profile
Rxkov

API SSRF: Allowlists Fail Because They Validate the URL, Not the Resolved IP

#api #cybersecurity #infosec #security
Comments
6 min read
Working: CORS misconfigurations escape automated detection
rxkov profile
Rxkov

Working: CORS misconfigurations escape automated detection

#api #cybersecurity #infosec #security
Comments
5 min read
JWT Algorithm Negotiation Is a Spec Design Flaw, Not a Library Bug
rxkov profile
Rxkov

JWT Algorithm Negotiation Is a Spec Design Flaw, Not a Library Bug

#cybersecurity #infosec #security
Comments
5 min read
Working: Rate Limiters Key on Raw Paths — Routers Normalize After
rxkov profile
Rxkov

Working: Rate Limiters Key on Raw Paths — Routers Normalize After

#backend #cybersecurity #security
Comments
4 min read
OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization
rxkov profile
Rxkov

OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization

#authentication #cybersecurity #security
Comments
5 min read
CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel
rxkov profile
Rxkov

CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel

#cybersecurity #infosec #security
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.