DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Built the Thing My Last Article Said Didn't Exist Yet

I Built the Thing My Last Article Said Didn't Exist Yet

2
Comments
4 min read
My MCP Server's GitHub Token Can Write. The Code That Promises It Never Will Had No Test.

My MCP Server's GitHub Token Can Write. The Code That Promises It Never Will Had No Test.

1
Comments 3
4 min read
I blocked XSS attacks and API Key extraction in the browser by monkey-patching `crypto.subtle`. Why isn't everyone doing this?

I blocked XSS attacks and API Key extraction in the browser by monkey-patching `crypto.subtle`. Why isn't everyone doing this?

Comments
1 min read
Your Sandbox Has a Hole in It, and the AI Agent Found It

Your Sandbox Has a Hole in It, and the AI Agent Found It

Comments
4 min read
7 JWT Security Mistakes I See in Almost Every Auth Implementation

7 JWT Security Mistakes I See in Almost Every Auth Implementation

Comments
2 min read
Common Cryptographic Anti-Patterns to Avoid in Modern APIs

Common Cryptographic Anti-Patterns to Avoid in Modern APIs

Comments
3 min read
Disruption of Polish CHP: Wind Farm to OT via Private APN

Disruption of Polish CHP: Wind Farm to OT via Private APN

Comments 2
8 min read
Product Leadership in the AI Era: Intent Governance and Token Economics

Product Leadership in the AI Era: Intent Governance and Token Economics

Comments 1
1 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

1
Comments
3 min read
Security news weekly round-up - 7th August 2026

Security news weekly round-up - 7th August 2026

1
Comments
4 min read
How to Block SQL Injection Attacks with a Free WAF

How to Block SQL Injection Attacks with a Free WAF

5
Comments
3 min read
I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

Comments 1
1 min read
Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Comments 1
4 min read
Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Comments
8 min read
How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

Comments 1
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.