DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why your base64-encoded image got bigger
chebit profile
che

Why your base64-encoded image got bigger

#webdev #javascript #programming #security
Comments
4 min read
Reading an encrypted Authenticator v3 backup in the browser: Argon2id, OpenSSL salt, and a dedupe rule
elite_kid_4b64c2d2d87b228 profile

Reading an encrypted Authenticator v3 backup in the browser: Argon2id, OpenSSL salt, and a dedupe rule

#javascript #security #webcrypto #browserextension
Comments
6 min read
Repository hooks to inspect before trusting a GitHub project
harshitethic profile

Repository hooks to inspect before trusting a GitHub project

#security #devtools #opensource #githubactions
Comments
4 min read
Trust Is a Feature: Verification Lessons From Building the Calendrz Mobile Backend
liviu_tudor_usa profile

Trust Is a Feature: Verification Lessons From Building the Calendrz Mobile Backend

#backend #mobile #security #softwaredevelopment
Comments
4 min read
A Byte Cap and Secret Gate Before You Send an OSS Patch to a Free Model
gitrs_5994 profile

A Byte Cap and Secret Gate Before You Send an OSS Patch to a Free Model

#opensource #ai #security #testing
Comments
5 min read
Golden ticket detection: the forged TGT that never touches the krbtgt password
stark_zhuang_df5076f35c68 profile

Golden ticket detection: the forged TGT that never touches the krbtgt password

#authentication #cybersecurity #infosec #security
Comments
3 min read
ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants
anoymask profile

ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants

#security #threatintel
1
Comments
10 min read
PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)
anoymask profile

PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

#security #threatintel
1
Comments
10 min read
Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List
anoymask profile

Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

#security #threatintel
1
Comments
8 min read
The same sentence means different things depending on which field it sits in
mrpkk profile

The same sentence means different things depending on which field it sits in

#ai #security #mcp #llm
Comments
4 min read
drift: continuous mandate enforcement for AI agents
mrpkk profile

drift: continuous mandate enforcement for AI agents

#ai #agents #security #mcp
Comments
1 min read
Building Your First MCP Server: Exposing Internal Tools to AI Agents Safely (TypeScript)
nextctl profile

Building Your First MCP Server: Exposing Internal Tools to AI Agents Safely (TypeScript)

#mcp #ai #typescript #security
Comments
7 min read
Looking for lateral movement with a neural network trained on synthetic data
nick_liapin profile

Looking for lateral movement with a neural network trained on synthetic data

#machinelearning #security #testing #opensource
Comments
46 min read
Dependency Confusion in the Langflow Batch: When the Supply Chain Is the Bug
onaeiuspkz profile

Dependency Confusion in the Langflow Batch: When the Supply Chain Is the Bug

#security #langflow #dependencyconfusion #supplychain
Comments
2 min read
The URL our webhook fetches does not come from the webhook, and we pin its host anyway
daniel_pertu profile

The URL our webhook fetches does not come from the webhook, and we pin its host anyway

#security #webdev #node #api
1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.