DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

Comments
5 min read
I kept losing scan chains to timeouts and copy-paste errors, so I built a recon-to-exploitation orchestrator instead of another scanner

I kept losing scan chains to timeouts and copy-paste errors, so I built a recon-to-exploitation orchestrator instead of another scanner

1
Comments
4 min read
Machine-Speed Attacks, Human-Paced Defense: The Credential Gap Behind Thirteen 2025/2026 Breaches

Machine-Speed Attacks, Human-Paced Defense: The Credential Gap Behind Thirteen 2025/2026 Breaches

4
Comments 2
5 min read
The ROI of Zero Trust: What the Breach-Cost Data Actually Shows

The ROI of Zero Trust: What the Breach-Cost Data Actually Shows

Comments 1
4 min read
Why AI Needs a “Genie Coefficient”

Why AI Needs a “Genie Coefficient”

Comments
1 min read
I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe

I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe

Comments
6 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

Comments 1
5 min read
OpenAI's Own AI Broke Out of Its Sandbox and Hacked Another Company — To Cheat on a Test

OpenAI's Own AI Broke Out of Its Sandbox and Hacked Another Company — To Cheat on a Test

Comments 1
7 min read
Risk Acceptance in Vulnerability Management: A Practical Framework for Tech Teams

Risk Acceptance in Vulnerability Management: A Practical Framework for Tech Teams

Comments
11 min read
Weekly Cybersecurity Roundup - Week of July 21, 2026

Weekly Cybersecurity Roundup - Week of July 21, 2026

Comments
5 min read
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

Comments
1 min read
Burp Suite: Main Purposes in Web Security Testing

Burp Suite: Main Purposes in Web Security Testing

2
Comments
1 min read
The GTA VI leak isn't really about GTA VI — it's an extortion playbook

The GTA VI leak isn't really about GTA VI — it's an extortion playbook

Comments
3 min read
Preparing for a SOC 2 Audit: Automating Vulnerability Compliance Evidence

Preparing for a SOC 2 Audit: Automating Vulnerability Compliance Evidence

Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.