DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350

Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350

1
Comments
3 min read
Zero-Tax Virtualization: Running AI Agents Safely in Velo Workspaces

Zero-Tax Virtualization: Running AI Agents Safely in Velo Workspaces

1
Comments 2
9 min read
Juniper, Sophos, WatchGuard and Barracuda: reading four edge vendors together

Juniper, Sophos, WatchGuard and Barracuda: reading four edge vendors together

1
Comments
2 min read
Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

3
Comments
5 min read
TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

3
Comments
6 min read
How I Purged 121 Leaked Secrets From 10 Years of Git History With Claude Code

How I Purged 121 Leaked Secrets From 10 Years of Git History With Claude Code

Comments 1
6 min read
Two XenForo Flaws in One Release: Empty OAuth2 Credentials and a Passkey That Belonged to Someone Else

Two XenForo Flaws in One Release: Empty OAuth2 Credentials and a Passkey That Belonged to Someone Else

1
Comments
3 min read
File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

2
Comments
7 min read
MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

2
Comments
6 min read
A deprecated value has to live somewhere, and widening the set was the wrong somewhere

A deprecated value has to live somewhere, and widening the set was the wrong somewhere

1
Comments
3 min read
Why a Reusable Agent Environment Shouldn't Be a Filesystem Snapshot

Why a Reusable Agent Environment Shouldn't Be a Filesystem Snapshot

Comments
6 min read
What WhatsApp, Instagram and Telegram actually do to your photos

What WhatsApp, Instagram and Telegram actually do to your photos

Comments 1
7 min read
Why I Built 26 Client-Side Developer Tools That Run 100% in Your Browser

Why I Built 26 Client-Side Developer Tools That Run 100% in Your Browser

Comments
2 min read
A Folder Shouldn't Be Able to Run Code Just Because I Opened It

A Folder Shouldn't Be Able to Run Code Just Because I Opened It

Comments 2
6 min read
We told Terraform to ignore one field and it hid a firewall change

We told Terraform to ignore one field and it hid a firewall change

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.