DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
XXE in Document-Processing APIs: The Attack Surface Nobody Hardens
rxkov profile
Rxkov

XXE in Document-Processing APIs: The Attack Surface Nobody Hardens

#cybersecurity #infosec #security
Comments
5 min read
OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization
rxkov profile
Rxkov

OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization

#authentication #cybersecurity #security
Comments
5 min read
Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint
rxkov profile
Rxkov

Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint

#authentication #cybersecurity #infosec #security
Comments
5 min read
AI Agent Replay Attacks: Your Execution Trace Is a Durable Attack Surface
rxkov profile
Rxkov

AI Agent Replay Attacks: Your Execution Trace Is a Durable Attack Surface

#agents #ai #cybersecurity #security
Comments
5 min read
PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows
rxkov profile
Rxkov

PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows

#authentication #cybersecurity #security
Comments
5 min read
CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel
rxkov profile
Rxkov

CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel

#cybersecurity #infosec #security
Comments
6 min read
HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs
rxkov profile
Rxkov

HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs

#api #authentication #cybersecurity #security
Comments
6 min read
Wireshark: A Beginner Guide to Network Packet Analysis
rithanya_angappan_11988c0 profile

Wireshark: A Beginner Guide to Network Packet Analysis

#beginners #cybersecurity #networking #security
1
Comments
5 min read
OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced
rxkov profile
Rxkov

OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced

#api #authentication #cybersecurity #security
Comments
5 min read
Working: Rate Limiters Key on Raw Paths — Routers Normalize After
rxkov profile
Rxkov

Working: Rate Limiters Key on Raw Paths — Routers Normalize After

#backend #cybersecurity #security
Comments
4 min read
BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method
rxkov profile
Rxkov

BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method

#api #cybersecurity #security #testing
Comments
5 min read
LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope
rxkov profile
Rxkov

LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope

#api #authentication #cybersecurity #security
Comments
5 min read
JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It
rxkov profile
Rxkov

JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It

#authentication #cybersecurity #infosec #security
Comments
5 min read
API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/
rxkov profile
Rxkov

API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/

#api #backend #cybersecurity #security
Comments
5 min read
Dependency Confusion: When the Public Registry Overwrites Your Private Package
rxkov profile
Rxkov

Dependency Confusion: When the Public Registry Overwrites Your Private Package

#cybersecurity #security #software
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.