DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Passkeys at Scale on Android: An Error Taxonomy, an Eligibility Gate, and a Fallback You Can Trust

Passkeys at Scale on Android: An Error Taxonomy, an Eligibility Gate, and a Fallback You Can Trust

Comments
12 min read
Lean Pixels, Silent Logins: Getting an Android App Ready for Play’s 2027 Quality Bar

Lean Pixels, Silent Logins: Getting an Android App Ready for Play’s 2027 Quality Bar

Comments
11 min read
GitSpawn: Your AI Coding Agent Runs Attacker Code Before You Type Anything

GitSpawn: Your AI Coding Agent Runs Attacker Code Before You Type Anything

Comments
1 min read
Stop trusting file extensions: validating uploads by content (with ffmpeg)

Stop trusting file extensions: validating uploads by content (with ffmpeg)

Comments
3 min read
A SHA-256 of a 6-digit PIN is not a secret: Node.js tried all 1,000,000 PINs in 2.3 seconds. scrypt makes the same search take about 14 hours

A SHA-256 of a 6-digit PIN is not a secret: Node.js tried all 1,000,000 PINs in 2.3 seconds. scrypt makes the same search take about 14 hours

Comments
4 min read
CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

Comments
1 min read
MCP Authorization: Protect an MCP Server with OAuth 2.1

MCP Authorization: Protect an MCP Server with OAuth 2.1

Comments
8 min read
I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.

I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.

Comments
7 min read
Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats

Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats

Comments
7 min read
Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes

Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes

Comments
5 min read
Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach

Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach

Comments
5 min read
Five security tests for MCP servers and agents, in 173 lines of Python

Five security tests for MCP servers and agents, in 173 lines of Python

Comments 1
10 min read
Private SaaS File Exports: Object Storage Service and Signed Download URLs

Private SaaS File Exports: Object Storage Service and Signed Download URLs

Comments
6 min read
Four datasets you can actually download (CSV and JSON)

Four datasets you can actually download (CSV and JSON)

Comments
2 min read
Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses

Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses

2
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.