DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Adding AI Code Review to a Self-Hosted GitLab — Without Handing It the Keys

Adding AI Code Review to a Self-Hosted GitLab — Without Handing It the Keys

Comments
7 min read
Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Comments
4 min read
How to Verify AI Agent Work: State Machines, Approval Gates, and Least-Privilege Access

How to Verify AI Agent Work: State Machines, Approval Gates, and Least-Privilege Access

6
Comments 20
9 min read
How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

Comments
12 min read
Beyond Regex: Building Detection Rules for AI Agent Vulnerabilities

Beyond Regex: Building Detection Rules for AI Agent Vulnerabilities

Comments
3 min read
Chainlink Automation Isn't a Cron Job. It's a Consensus Decision

Chainlink Automation Isn't a Cron Job. It's a Consensus Decision

6
Comments
6 min read
CodeIgniter 4 CSRF Protection in AJAX Forms — The Complete Fix

CodeIgniter 4 CSRF Protection in AJAX Forms — The Complete Fix

2
Comments
6 min read
Let AI Triage Static-Analysis Alerts Without Letting It Hide Bugs

Let AI Triage Static-Analysis Alerts Without Letting It Hide Bugs

Comments
2 min read
[IBM-Tech] 提示词恶意软件杀伤链(The Promptware Kill Chain)剖析

[IBM-Tech] 提示词恶意软件杀伤链(The Promptware Kill Chain)剖析

Comments
1 min read
Stop BOLA Attacks: Securing Laravel APIs with ULIDs 🛡️

Stop BOLA Attacks: Securing Laravel APIs with ULIDs 🛡️

1
Comments
3 min read
What Happens When an SSL Certificate Expires? (And How Agencies Can Prevent It)

What Happens When an SSL Certificate Expires? (And How Agencies Can Prevent It)

1
Comments
11 min read
Building a Low-Level ICMP Sniffer in x64 Assembly (Raw Sockets)

Building a Low-Level ICMP Sniffer in x64 Assembly (Raw Sockets)

Comments
3 min read
Tired of paying for Burpsuite so I started SNORPY

Tired of paying for Burpsuite so I started SNORPY

Comments
1 min read
Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Comments
5 min read
Stop Mass Assignment Before It Reaches Your Authorization Layer

Stop Mass Assignment Before It Reaches Your Authorization Layer

1
Comments 2
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.