DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Autonomous pentesting against Active Directory, without the black box

Autonomous pentesting against Active Directory, without the black box

Comments
1 min read
Why Cursor Keeps Hashing Passwords With MD5 (And How to Fix It)

Why Cursor Keeps Hashing Passwords With MD5 (And How to Fix It)

Comments
2 min read
Why Cursor Writes Login Endpoints With No Rate Limiting

Why Cursor Writes Login Endpoints With No Rate Limiting

1
Comments
4 min read
Cursor Learned to Code From Tutorials That Skip Security

Cursor Learned to Code From Tutorials That Skip Security

5
Comments 1
5 min read
SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

Comments
5 min read
We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

1
Comments
4 min read
Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss

Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss

1
Comments
9 min read
I Built a Policy Scanner That Fixes My Terraform and Proves the Fix Holds

I Built a Policy Scanner That Fixes My Terraform and Proves the Fix Holds

Comments
4 min read
Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)

Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)

39
Comments 1
5 min read
Applying SAST to a PHP Application with Psalm's Taint Analysis

Applying SAST to a PHP Application with Psalm's Taint Analysis

Comments 1
5 min read
Why Every CISO Needs an AIBOM in 2026 — And What Vendors Get Wrong

Why Every CISO Needs an AIBOM in 2026 — And What Vendors Get Wrong

Comments
9 min read
SAST vs SCA: why your CI pipeline needs both

SAST vs SCA: why your CI pipeline needs both

Comments
4 min read
Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

Comments
6 min read
The Linux Skills That Separate Junior and Senior DevOps Engineers: A Practical Comparison

The Linux Skills That Separate Junior and Senior DevOps Engineers: A Practical Comparison

Comments
3 min read
Security triage shouldn't happen in another browser tab.

Security triage shouldn't happen in another browser tab.

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.