DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
LLM Red Teaming: How to Test Your AI for Prompt Injection, Jailbreaks, and Data Leakage

LLM Red Teaming: How to Test Your AI for Prompt Injection, Jailbreaks, and Data Leakage

1
Comments 1
5 min read
drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)

drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)

Comments 1
4 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Comments
2 min read
Networking Foundations: From OSI Layers to TCP Handshakes

Networking Foundations: From OSI Layers to TCP Handshakes

1
Comments
6 min read
Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later

Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later

Comments
2 min read
Software Composition Analysis (SCA): The 2026 Complete Guide

Software Composition Analysis (SCA): The 2026 Complete Guide

Comments
7 min read
Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers

Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers

Comments
3 min read
Hardcoded Secrets: Why AI Code Fails Your First SOC 2 Audit

Hardcoded Secrets: Why AI Code Fails Your First SOC 2 Audit

Comments 1
3 min read
Cursor Keeps Skipping Rate Limits on Login Routes (CWE-307)

Cursor Keeps Skipping Rate Limits on Login Routes (CWE-307)

Comments
3 min read
Inside the Chain: the tj-actions compromise wasn't one incident — it was three

Inside the Chain: the tj-actions compromise wasn't one incident — it was three

Comments
2 min read
SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner

SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner

Comments
4 min read
MCP for AWS Security Engineers: Build a Read-Only Security Hub Triage Agent

MCP for AWS Security Engineers: Build a Read-Only Security Hub Triage Agent

1
Comments
20 min read
SQL Injection in AI-Generated Code: Why Cursor Keeps Writing It

SQL Injection in AI-Generated Code: Why Cursor Keeps Writing It

Comments
2 min read
Why Cursor Writes IDOR Into Your API Routes (CWE-639)

Why Cursor Writes IDOR Into Your API Routes (CWE-639)

1
Comments 1
4 min read
How to Scan and Fix a Vibe-Coded App Before It Leaks Secrets

How to Scan and Fix a Vibe-Coded App Before It Leaks Secrets

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.