DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Boston Cancelled Its License Plate Cameras. The Cameras Didn't Leave.

Boston Cancelled Its License Plate Cameras. The Cameras Didn't Leave.

Comments
3 min read
The VSIX Packaging Trap: How I Eliminated Embedded Client Secrets from a VS Code Extension

The VSIX Packaging Trap: How I Eliminated Embedded Client Secrets from a VS Code Extension

Comments
7 min read
Your SVG Has No Scripts. Is It Safe to Process?

Your SVG Has No Scripts. Is It Safe to Process?

Comments
3 min read
Thirty-Four Out of Thirty-Four. Then Zero Out of Ten.

Thirty-Four Out of Thirty-Four. Then Zero Out of Ten.

Comments
6 min read
A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files

A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files

Comments 1
4 min read
Ransomware Detection for Windows and Linux using ETW and eBPF

Ransomware Detection for Windows and Linux using ETW and eBPF

Comments 1
2 min read
WebSocket subscribe is still authorization

WebSocket subscribe is still authorization

Comments 1
1 min read
Marketplace API Key Identity and Scope — Credential Lifetime Management Explained

Marketplace API Key Identity and Scope — Credential Lifetime Management Explained

Comments
6 min read
SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

1
Comments
6 min read
Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

1
Comments
5 min read
CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

1
Comments
6 min read
OAuth client_credentials in Spring Boot for Prometheus Scrapes

OAuth client_credentials in Spring Boot for Prometheus Scrapes

Comments
10 min read
Open-Sourcing Code Doesn't Undo Encrypting the Evidence

Open-Sourcing Code Doesn't Undo Encrypting the Evidence

1
Comments
3 min read
Bitget Loses $351.6M After Attackers Spoof the Data Its Own Approval Process Trusted

Bitget Loses $351.6M After Attackers Spoof the Data Its Own Approval Process Trusted

Comments
5 min read
Stop Testing Signup Flows With Your Real Email

Stop Testing Signup Flows With Your Real Email

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.