DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
F*ck CTF: Can a Multi-Agent LLM really play Capture The Flag?

F*ck CTF: Can a Multi-Agent LLM really play Capture The Flag?

Comments
2 min read
What Is Jump-Oriented Programming? How Can Attackers Hijack Control Flow Without RET?

What Is Jump-Oriented Programming? How Can Attackers Hijack Control Flow Without RET?

2
Comments 3
9 min read
The Account You Forgot to Disable Is the Door You Left Open

The Account You Forgot to Disable Is the Door You Left Open

Comments
2 min read
2026-10-02: Atomic macOS (AMOS) Stealer infection from malicious ad impersonating Claude Code

2026-10-02: Atomic macOS (AMOS) Stealer infection from malicious ad impersonating Claude Code

1
Comments 1
1 min read
The Log You Didn't Keep Is the Investigation You Can't Run

The Log You Didn't Keep Is the Investigation You Can't Run

Comments
2 min read
The Patch You Postpone Is the Exploit You Invite

The Patch You Postpone Is the Exploit You Invite

Comments
2 min read
Securing the Mission: Applying Security Techniques to Computing Resources

Securing the Mission: Applying Security Techniques to Computing Resources

Comments
4 min read
Least Privilege Is a Habit, Not a Project

Least Privilege Is a Habit, Not a Project

Comments
2 min read
Weekly Cybersecurity Roundup; Week of August 28, 2026

Weekly Cybersecurity Roundup; Week of August 28, 2026

Comments
6 min read
OWASP Top 10: A09 & A10 — Logging, Alerting and Exceptional Conditions

OWASP Top 10: A09 & A10 — Logging, Alerting and Exceptional Conditions

Comments
1 min read
Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

1
Comments
1 min read
Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access

Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access

Comments
5 min read
The safety penalty: Reclaiming operational sovereignty in the age of AI

The safety penalty: Reclaiming operational sovereignty in the age of AI

1
Comments
1 min read
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

Comments
5 min read
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.