DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
LLM Covert Channels: How AI Agents Exfiltrate Data in Plain Sight
rxkov profile
Rxkov

LLM Covert Channels: How AI Agents Exfiltrate Data in Plain Sight

#ai #cybersecurity #llm #security
Comments
5 min read
AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control
rxkov profile
Rxkov

AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control

#agents #ai #cybersecurity #security
Comments 1
5 min read
Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production
rxkov profile
Rxkov

Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production

#cybersecurity #devops #security
Comments 1
5 min read
Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents
rxkov profile
Rxkov

Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents

#agents #ai #cybersecurity #security
Comments 1
5 min read
Email Header Analysis: What SMTP Metadata Reveals About Infrastructure and Identity
rxkov profile
Rxkov

Email Header Analysis: What SMTP Metadata Reveals About Infrastructure and Identity

#cybersecurity #infrastructure #networking #security
Comments 1
6 min read
AI Coding Agents Are Credential Extractors by Design
rxkov profile
Rxkov

AI Coding Agents Are Credential Extractors by Design

#agents #ai #cybersecurity #security
Comments 1
5 min read
Why I Built a Real SOC in My Basement
bryant_at_bxbtech profile
Bryant

Why I Built a Real SOC in My Basement

#cybersecurity #monitoring #security
Comments
5 min read
Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited
rxkov profile
Rxkov

Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited

#aws #cloud #cybersecurity #security
Comments
6 min read
API Token in Query Parameter: Six Places the Credential Persists Without You Knowing
rxkov profile
Rxkov

API Token in Query Parameter: Six Places the Credential Persists Without You Knowing

#api #backend #cybersecurity #security
Comments
5 min read
GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls
rxkov profile
Rxkov

GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls

#api #cybersecurity #infosec #security
Comments
5 min read
Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing
rxkov profile
Rxkov

Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

#api #authentication #cybersecurity #security
Comments
5 min read
AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions
rxkov profile
Rxkov

AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

#ai #cybersecurity #llm #security
Comments
5 min read
SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity
rxkov profile
Rxkov

SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity

#api #aws #cybersecurity #security
Comments
5 min read
CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover
rxkov profile
Rxkov

CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover

#cybersecurity #infosec #security
Comments
5 min read
Secrets in Docker Images: What Public Container Registries Expose
rxkov profile
Rxkov

Secrets in Docker Images: What Public Container Registries Expose

#cybersecurity #devops #docker #security
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.