DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A SHA-256 of a 6-digit PIN is not a secret: Node.js tried all 1,000,000 PINs in 2.3 seconds. scrypt makes the same search take about 14 hours
takahiro_hashito_a1f3f0dc profile

A SHA-256 of a 6-digit PIN is not a secret: Node.js tried all 1,000,000 PINs in 2.3 seconds. scrypt makes the same search take about 14 hours

#security #node #cryptography
Comments
4 min read
I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.
purvanshbhatt profile

I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.

#backend #database #security #testing
Comments
7 min read
CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell
threataft_dev profile

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

#security #vulnerabilities #barracuda #cve
Comments
1 min read
Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes
etairos profile

Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes

#cybersecurity #infosec #security
Comments
5 min read
MCP Authorization: Protect an MCP Server with OAuth 2.1
chaogetalks profile

MCP Authorization: Protect an MCP Server with OAuth 2.1

#ai #security #oauth #mcp
Comments
8 min read
Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats
caspianhayes3586 profile

Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats

#presence #go #security
Comments
7 min read
Microsoft MDASH: Filtering 26,502 AI Scan Results Down to 59 Kernel Bugs and Eight Root Exploits
anoymask profile

Microsoft MDASH: Filtering 26,502 AI Scan Results Down to 59 Kernel Bugs and Eight Root Exploits

#security #threatintel
2
Comments
4 min read
Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses
anoymask profile

Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses

#security #threatintel
2
Comments
6 min read
Five security tests for MCP servers and agents, in 173 lines of Python
cryptomoneymakr profile

Five security tests for MCP servers and agents, in 173 lines of Python

#mcp #security #python #ai
Comments 1
10 min read
Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach
vendortrustindex profile

Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach

#security #ai #devops #cybersecurity
Comments
5 min read
Falcon C2: Controlling Browsers and Stealing Passwords and Cookies Through JavaScript on Compromised Websites
anoymask profile

Falcon C2: Controlling Browsers and Stealing Passwords and Cookies Through JavaScript on Compromised Websites

#security #threatintel
2
Comments
6 min read
AntiFox-Linked Activity: IIS Web Shells, Misuse of Stolen AWS Credentials, Secret Retrieval, and S3 Operations
anoymask profile

AntiFox-Linked Activity: IIS Web Shells, Misuse of Stolen AWS Credentials, Secret Retrieval, and S3 Operations

#security #threatintel
2
Comments
6 min read
Private SaaS File Exports: Object Storage Service and Signed Download URLs
dawnli2026 profile

Private SaaS File Exports: Object Storage Service and Signed Download URLs

#storage #saas #security
Comments
6 min read
Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks
bot2botlabs profile

Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks

#mcp #security #ai #opensource
Comments 1
4 min read
Four datasets you can actually download (CSV and JSON)
mikweb2025design profile

Four datasets you can actually download (CSV and JSON)

#opensource #data #devops #security
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.