DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why 90% of CMS Hacks Happen Through Plugins (And How We Solved It With OS Process Isolation)

Why 90% of CMS Hacks Happen Through Plugins (And How We Solved It With OS Process Isolation)

2
Comments
4 min read
Security news weekly round-up - 14th August 2026

Security news weekly round-up - 14th August 2026

2
Comments
3 min read
Four things get called "someone is spoofing my domain". DMARC fixes one.

Four things get called "someone is spoofing my domain". DMARC fixes one.

Comments 2
4 min read
Google's AI Just Found a Chrome Bug That Hid From Humans for 13 Years

Google's AI Just Found a Chrome Bug That Hid From Humans for 13 Years

Comments
5 min read
SQLAlchemy Composite Foreign Keys for Multi-Tenant Hierarchical Permissions: Enforcing (tenant_id, role_id) Constraints

SQLAlchemy Composite Foreign Keys for Multi-Tenant Hierarchical Permissions: Enforcing (tenant_id, role_id) Constraints

Comments 1
4 min read
Client-Side Web Security Essentials

Client-Side Web Security Essentials

6
Comments 3
6 min read
Azure RBAC: Owner vs Contributor vs Reader (and when to use each)

Azure RBAC: Owner vs Contributor vs Reader (and when to use each)

Comments
5 min read
I measured 8,270 software releases to see if support windows are really shrinking

I measured 8,270 software releases to see if support windows are really shrinking

Comments
3 min read
Building an Open-Source, Zero-Knowledge DocSend Alternative with React 19 and Supabase

Building an Open-Source, Zero-Knowledge DocSend Alternative with React 19 and Supabase

1
Comments
1 min read
How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

Comments
1 min read
Why Your OAuth Integration Randomly Returns invalid_grant (and How to Stop Two Workers From Racing)

Why Your OAuth Integration Randomly Returns invalid_grant (and How to Stop Two Workers From Racing)

Comments
7 min read
My smart-contract scanner reports almost nothing — and that's the whole point

My smart-contract scanner reports almost nothing — and that's the whole point

Comments 3
3 min read
Word review artifacts need a CI boundary too

Word review artifacts need a CI boundary too

Comments
3 min read
Your agent isn't reckless. It just can't see the blast radius.

Fixing blast radius via negative constraints

Your agent isn't reckless. It just can't see the blast radius.

7
Comments 14
8 min read
How to Secure your WordPress Site: 5 Essential Best Practices for Beginners

How to Secure your WordPress Site: 5 Essential Best Practices for Beginners

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.