DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Comments 1
5 min read
Building a Continuous Threat Exposure Management (CTEM) Program — Open Source, Cloud-Agnostic, and Zero Hidden Cost

Building a Continuous Threat Exposure Management (CTEM) Program — Open Source, Cloud-Agnostic, and Zero Hidden Cost

1
Comments
6 min read
🔐 SafetyNet: a full-stack device-security toolkit for iOS, Android, Flutter, and React Native

🔐 SafetyNet: a full-stack device-security toolkit for iOS, Android, Flutter, and React Native

Comments
2 min read
Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Comments
6 min read
Token Service Isolation: Containing Customer Support Chat Reconnect and Backfill Failures

Token Service Isolation: Containing Customer Support Chat Reconnect and Backfill Failures

Comments
8 min read
My AI agent found 129 resolving subdomains. The Actor classified 98 as wildcard-likely.

My AI agent found 129 resolving subdomains. The Actor classified 98 as wildcard-likely.

1
Comments
7 min read
TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

Comments
6 min read
GrapheneOS vs Stock Android: Privacy, Security and Control

GrapheneOS vs Stock Android: Privacy, Security and Control

Comments
7 min read
Flash Loan Attack Vector Analysis: Portal

Flash Loan Attack Vector Analysis: Portal

1
Comments
7 min read
RAG security: the retrieved document is now your attack surface

RAG security: the retrieved document is now your attack surface

1
Comments 2
3 min read
TORchIM - Anonymous Tor P2P Messenger

TORchIM - Anonymous Tor P2P Messenger

Comments
1 min read
Before You Install That MCP Server, Check It for Tool Poisoning

Before You Install That MCP Server, Check It for Tool Poisoning

1
Comments
3 min read
The AI Had an Authoritative Source. It Was Still Wrong.

The AI Had an Authoritative Source. It Was Still Wrong.

2
Comments
7 min read
How to Block Disposable Emails and Fake Signups in Node.js & Python

How to Block Disposable Emails and Fake Signups in Node.js & Python

Comments
1 min read
Moving a password to another device without syncing your vault

Moving a password to another device without syncing your vault

5
Comments 4
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.