DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Tool May Have Succeeded. The Audit Log Failed. Should the Agent Retry?

The Tool May Have Succeeded. The Audit Log Failed. Should the Agent Retry?

1
Comments 2
7 min read
Your Stripe key is on GitHub. Do this now, in this order.

Your Stripe key is on GitHub. Do this now, in this order.

Comments
3 min read
Building an Automated SSL Certificate Monitor with Alerting

Building an Automated SSL Certificate Monitor with Alerting

Comments
5 min read
SPEAKINGSTONE and DARKLANTERN in ZBT-Based White-Label Routers: WAN-Accessible Root Shell and DNS Hijacking

SPEAKINGSTONE and DARKLANTERN in ZBT-Based White-Label Routers: WAN-Accessible Root Shell and DNS Hijacking

Comments 2
5 min read
TA4922 PackClient Attacks: From Tax Documents to DLL Side-Loading and RAT Deployment

TA4922 PackClient Attacks: From Tax Documents to DLL Side-Loading and RAT Deployment

Comments 2
5 min read
Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration

Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration

Comments 2
5 min read
Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack: Lateral Movement from Artifactory Across Multiple Regions

Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack: Lateral Movement from Artifactory Across Multiple Regions

Comments 2
5 min read
Citrix NetScaler CVE-2026-8452: SAML Heap Overflow to Root RCE and Web Shell Deployment

Citrix NetScaler CVE-2026-8452: SAML Heap Overflow to Root RCE and Web Shell Deployment

Comments 2
7 min read
MCP in enterprise: access control and audit logging

MCP in enterprise: access control and audit logging

1
Comments
5 min read
TLS and mTLS for Infra Services: A Production Deep Dive for Solo Devs and Small Startups

TLS and mTLS for Infra Services: A Production Deep Dive for Solo Devs and Small Startups

1
Comments
12 min read
cargo-witness: verify a published Rust crate matches the exact commit it claims

cargo-witness: verify a published Rust crate matches the exact commit it claims

1
Comments
3 min read
Preparing Your Enterprise APIs for Post-Quantum Cryptography: A Practical Migration Blueprint

Preparing Your Enterprise APIs for Post-Quantum Cryptography: A Practical Migration Blueprint

Comments
2 min read
Document pseudonymization for AI assistants: sending the spreadsheet without sending the customers

Document pseudonymization for AI assistants: sending the spreadsheet without sending the customers

Comments 2
8 min read
Threat-Model a Connected Health Dashboard With Consent-Boundary Tests

Threat-Model a Connected Health Dashboard With Consent-Boundary Tests

Comments
3 min read
The Dangerous Docker Firewall Bypass (And How to Fix It Using UFW)

The Dangerous Docker Firewall Bypass (And How to Fix It Using UFW)

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.