DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Attackers Hit Langflow 12 Times This Year. They Are Not Stealing Data, They Are Stealing Your API Keys
jamilxt profile

Attackers Hit Langflow 12 Times This Year. They Are Not Stealing Data, They Are Stealing Your API Keys

#security #ai #devsecops #tutorial
Comments
7 min read
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Reproducible vulnerability scans with dumpscan
moonrunnerkc profile

Reproducible vulnerability scans with dumpscan

#security #devsecops #opensource #node
1
Comments
2 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Avoid adding new library to project: 10-year retrospective
pvsdev profile

Avoid adding new library to project: 10-year retrospective

#cybersecurity #devops #devsecops #software
1
Comments
10 min read
Beyond free-roaming Agents: Architecting a Deterministic 4-node Graph pipeline for near zero false-positive Autonomous VAPT
kenzman profile

Beyond free-roaming Agents: Architecting a Deterministic 4-node Graph pipeline for near zero false-positive Autonomous VAPT

#ai #webdev #security #devsecops
1
Comments 7
11 min read
GCP The Hard Way — Part 3: Auditing IAM Misconfigurations Before They Become Incidents
pilgrim2go profile

GCP The Hard Way — Part 3: Auditing IAM Misconfigurations Before They Become Incidents

#gcp #iam #security #devsecops
Comments 1
3 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security #devsecops #appsec #devops
Comments
8 min read
Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)
c_k_fb750e731394 profile

Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)

#security #webdev #ai #devsecops
1
Comments
4 min read
The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)
c_k_fb750e731394 profile

The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)

#security #webdev #ai #devsecops
1
Comments
7 min read
Where does Secure by Design End? A 3D/4D Model
adbc99 profile

Where does Secure by Design End? A 3D/4D Model

#security #devsecops #ai #architecture
Comments
3 min read
LLM Red Teaming: How to Test Your AI for Prompt Injection, Jailbreaks, and Data Leakage
loginsoft profile

LLM Red Teaming: How to Test Your AI for Prompt Injection, Jailbreaks, and Data Leakage

#security #llm #ai #devsecops
1
Comments 1
5 min read
drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)
ezequiellich profile
Eze

drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)

#security #devsecops #web3 #github
Comments 1
4 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)
c_k_fb750e731394 profile

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

#security #webdev #ai #devsecops
Comments
2 min read
Networking Foundations: From OSI Layers to TCP Handshakes
dharam_in profile

Networking Foundations: From OSI Layers to TCP Handshakes

#devops #devsecops #networking #linux
1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.