DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Agent Checkpoint Tampering: The State File Is the Attack Surface
rxkov profile
Rxkov

AI Agent Checkpoint Tampering: The State File Is the Attack Surface

#ai #cybersecurity #security #vulnerabilities
Comments 1
5 min read
Working: HTTP request smuggling is a distributed systems trust failure, not a web app bug
rxkov profile
Rxkov

Working: HTTP request smuggling is a distributed systems trust failure, not a web app bug

#architecture #cybersecurity #infrastructure #security
Comments
6 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
rxkov profile
Rxkov

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Agent Output Is an Injection Vector: SQL, Shell, and Template Engines
rxkov profile
Rxkov

Agent Output Is an Injection Vector: SQL, Shell, and Template Engines

#agents #ai #cybersecurity #llm
Comments
5 min read
OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store
rxkov profile
Rxkov

OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store

#ai #cybersecurity #llm #security
Comments
4 min read
Framework Binding Gap: How the ORM Accepts Fields You Never Documented
rxkov profile
Rxkov

Framework Binding Gap: How the ORM Accepts Fields You Never Documented

#backend #cybersecurity #database #security
Comments
6 min read
Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page
rxkov profile
Rxkov

Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page

#authentication #cybersecurity #infosec #security
Comments
5 min read
BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method
rxkov profile
Rxkov

BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method

#api #cybersecurity #security #testing
Comments
5 min read
LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope
rxkov profile
Rxkov

LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope

#api #authentication #cybersecurity #security
Comments
5 min read
LLM Covert Channels: How AI Agents Exfiltrate Data in Plain Sight
rxkov profile
Rxkov

LLM Covert Channels: How AI Agents Exfiltrate Data in Plain Sight

#ai #cybersecurity #llm #security
Comments
5 min read
Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle
rxkov profile
Rxkov

Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle

#api #backend #cybersecurity #security
Comments
5 min read
Mobile Certificate Pinning Bypassed in 60 Seconds: What Frida Reveals About the Real Threat Model
rxkov profile
Rxkov

Mobile Certificate Pinning Bypassed in 60 Seconds: What Frida Reveals About the Real Threat Model

#android #cybersecurity #mobile #security
Comments
5 min read
MCP Tool Schema Poisoning: When the Framework Layer Authorizes the Attack
rxkov profile
Rxkov

MCP Tool Schema Poisoning: When the Framework Layer Authorizes the Attack

#cybersecurity #llm #mcp #security
Comments
6 min read
Prompt Caching Is a Timing Oracle: How the 41-80% Cost Win Becomes Cross-Tenant System Prompt Extraction
rxkov profile
Rxkov

Prompt Caching Is a Timing Oracle: How the 41-80% Cost Win Becomes Cross-Tenant System Prompt Extraction

#api #cybersecurity #llm #security
Comments
4 min read
The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking
rxkov profile
Rxkov

The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking

#authentication #cybersecurity #javascript #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.