DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Agent Safety Is Not a Firewall. It's an Operating System. (And It Needs a Human)

Agent Safety Is Not a Firewall. It's an Operating System. (And It Needs a Human)

Comments
4 min read
How I Built an Explainable Signup Email Risk Checker with Node.js

How I Built an Explainable Signup Email Risk Checker with Node.js

Comments
3 min read
12 Questions That Actually Separate Threat Detection Vendors

12 Questions That Actually Separate Threat Detection Vendors

Comments
8 min read
6 IoT Trends for 2026, Translated From Business-Speak Into Developer

6 IoT Trends for 2026, Translated From Business-Speak Into Developer

Comments
5 min read
No CVE needed: how a GitHub issue hijacked an AI agent

No CVE needed: how a GitHub issue hijacked an AI agent

2
Comments 3
5 min read
One-Line Security Fix: How an XLS Quote Escaping Bug in Dify Leaked Spreadsheet Data

One-Line Security Fix: How an XLS Quote Escaping Bug in Dify Leaked Spreadsheet Data

Comments
1 min read
From Custom Code to Mature Library: Why I Replaced My SSRF Protection with requests-hardened

From Custom Code to Mature Library: Why I Replaced My SSRF Protection with requests-hardened

Comments
2 min read
Why penv adopted @env-spec instead of inventing a schema format

Why penv adopted @env-spec instead of inventing a schema format

Comments
4 min read
Why Cue still uses AppContainer after Codex rejected it for Windows agents

Why Cue still uses AppContainer after Codex rejected it for Windows agents

Comments
3 min read
Do the Top Domains Actually Protect Their Email? SPF, DMARC and MTA-STS, Measured

Do the Top Domains Actually Protect Their Email? SPF, DMARC and MTA-STS, Measured

1
Comments 1
3 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)

How npm typosquatting and dependency confusion attacks work (and how to stop them)

Comments 1
3 min read
Password1! passes your password rules. Here's what NIST actually asks for

Password1! passes your password rules. Here's what NIST actually asks for

Comments
5 min read
GPT-6 Astra Shipped With Its Zero-Day Skill Behind a Gate. Here's What 'Gated Capability' Means for the Rest of Us.

GPT-6 Astra Shipped With Its Zero-Day Skill Behind a Gate. Here's What 'Gated Capability' Means for the Rest of Us.

1
Comments
3 min read
What Can Sysmon Actually See? My First Dive into SIEM Detection with Sysmon and Wazuh

What Can Sysmon Actually See? My First Dive into SIEM Detection with Sysmon and Wazuh

Comments
10 min read
Decoupled Security: Securing the Auth Flow Without Touching the Implementation

Decoupled Security: Securing the Auth Flow Without Touching the Implementation

Comments 1
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.