DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Agent Checkpoint Tampering: The State File Is the Attack Surface
rxkov profile
Rxkov

AI Agent Checkpoint Tampering: The State File Is the Attack Surface

#ai #cybersecurity #security #vulnerabilities
Comments 1
5 min read
CRLF Injection in API Responses: When User Input Reaches HTTP Headers
rxkov profile
Rxkov

CRLF Injection in API Responses: When User Input Reaches HTTP Headers

#api #backend #cybersecurity #security
Comments
5 min read
LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope
rxkov profile
Rxkov

LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope

#api #authentication #cybersecurity #security
Comments
5 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
rxkov profile
Rxkov

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
Content-Type Confusion in REST APIs: One Header Switch, Three Attack Surfaces
rxkov profile
Rxkov

Content-Type Confusion in REST APIs: One Header Switch, Three Attack Surfaces

#api #cybersecurity #java #security
Comments
5 min read
Rate Limiting Fails in Production Because It Counts the Wrong Dimension
rxkov profile
Rxkov

Rate Limiting Fails in Production Because It Counts the Wrong Dimension

#authentication #cybersecurity #production #security
Comments
6 min read
Working: HTTP request smuggling is a distributed systems trust failure, not a web app bug
rxkov profile
Rxkov

Working: HTTP request smuggling is a distributed systems trust failure, not a web app bug

#architecture #cybersecurity #infrastructure #security
Comments
6 min read
NoSQL Injection in APIs: From Auth Bypass to JavaScript Execution via MongoDB Operators
rxkov profile
Rxkov

NoSQL Injection in APIs: From Auth Bypass to JavaScript Execution via MongoDB Operators

#api #cybersecurity #database #security
Comments
5 min read
JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent
rxkov profile
Rxkov

JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

#api #authentication #cybersecurity #security
Comments
5 min read
Dependency Confusion: When the Public Registry Overwrites Your Private Package
rxkov profile
Rxkov

Dependency Confusion: When the Public Registry Overwrites Your Private Package

#cybersecurity #security #software
Comments
6 min read
CyberMoranda CIDS: Building a Security System That Thinks Before It Acts
cybermoranda profile

CyberMoranda CIDS: Building a Security System That Thinks Before It Acts

#architecture #cybersecurity #security #software
2
Comments 6
2 min read
LLM API Keys Fail Faster: Five Exposure Vectors Your Secret Hygiene Guide Has Not Caught Up With
rxkov profile
Rxkov

LLM API Keys Fail Faster: Five Exposure Vectors Your Secret Hygiene Guide Has Not Caught Up With

#ai #cybersecurity #llm #security
Comments
4 min read
Agent Output Is an Injection Vector: SQL, Shell, and Template Engines
rxkov profile
Rxkov

Agent Output Is an Injection Vector: SQL, Shell, and Template Engines

#agents #ai #cybersecurity #llm
Comments
5 min read
API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/
rxkov profile
Rxkov

API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/

#api #backend #cybersecurity #security
Comments
5 min read
JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It
rxkov profile
Rxkov

JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It

#authentication #cybersecurity #infosec #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.