DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

Comments
5 min read
Secrets in Docker Images: What Public Container Registries Expose

Secrets in Docker Images: What Public Container Registries Expose

Comments
6 min read
GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs

GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs

Comments
6 min read
Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism

Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism

Comments
6 min read
The SDK That Passes Your Tests and Exfiltrates Your Credentials

The SDK That Passes Your Tests and Exfiltrates Your Credentials

Comments
5 min read
GraphQL's Six Default Attack Surfaces

GraphQL's Six Default Attack Surfaces

Comments
5 min read
System Prompt Confidentiality Is Security by Obscurity

System Prompt Confidentiality Is Security by Obscurity

Comments
4 min read
JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID

JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID

Comments
5 min read
Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems

Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems

Comments
4 min read
Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive

Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive

Comments
5 min read
Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer

Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer

Comments
5 min read
The Sandbox That Exists Only in the System Prompt

The Sandbox That Exists Only in the System Prompt

Comments
5 min read
OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

Comments
6 min read
CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet

CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet

Comments
5 min read
Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.