DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-55420 for Regulated Environments: Evidence, Deadlines and Audit Trails

CVE-2026-55420 for Regulated Environments: Evidence, Deadlines and Audit Trails

Comments
3 min read
Entra Seamless SSO Not Working: A Read-First Intranet Zone, Kerberos Ticket, and AZUREADSSOACC Triage

Entra Seamless SSO Not Working: A Read-First Intranet Zone, Kerberos Ticket, and AZUREADSSOACC Triage

Comments
19 min read
Crypto Security: Why I Prefer Verifiable Information Over Big Promises.

Crypto Security: Why I Prefer Verifiable Information Over Big Promises.

1
Comments
3 min read
The Adventures of Blink S6e7: Security Response [NIST 800-53 CM(3)]

The Adventures of Blink S6e7: Security Response [NIST 800-53 CM(3)]

Comments
1 min read
AADSTS50105 User Not Assigned to a Role for the Application: A Read-First Enterprise App Assignment Triage

AADSTS50105 User Not Assigned to a Role for the Application: A Read-First Enterprise App Assignment Triage

Comments
14 min read
Loreflow: Security by Construction, Making Three Classes of AI Data Leaks Structurally Impossible

Loreflow: Security by Construction, Making Three Classes of AI Data Leaks Structurally Impossible

Comments
4 min read
Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Comments
2 min read
Rootless Docker builds silently ignore --resource memory limits

Rootless Docker builds silently ignore --resource memory limits

Comments
4 min read
PicoCTF Vigenere Writeup — Recover a Vigenère Key with Crib Dragging

PicoCTF Vigenere Writeup — Recover a Vigenère Key with Crib Dragging

Comments
4 min read
A Policy Kernel, Not a Prompt

A Policy Kernel, Not a Prompt

1
Comments 2
4 min read
VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

1
Comments
5 min read
Statically catching ONNX external_data path traversal before a model loads

Statically catching ONNX external_data path traversal before a model loads

Comments
2 min read
DeepSeek Suspended My Account Three Times. My Archive Didn't Care.

DeepSeek Suspended My Account Three Times. My Archive Didn't Care.

Comments
1 min read
Last week in Agent Security Update 3: That's not Aoki!

Last week in Agent Security Update 3: That's not Aoki!

Comments 1
7 min read
Red-Teaming a Kids' AI Tutor: How a One-Word Variant Slipped Past Our Prompt-Injection Filter

Red-Teaming a Kids' AI Tutor: How a One-Word Variant Slipped Past Our Prompt-Injection Filter

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.