DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Dangerous MCP OAuth Shortcuts are Ruining Security

Dangerous MCP OAuth Shortcuts are Ruining Security

1
Comments
1 min read
How Attackers Chain XSS and CSRF Across Multiple Applications: Understanding Multistage Web Attacks

How Attackers Chain XSS and CSRF Across Multiple Applications: Understanding Multistage Web Attacks

Comments
4 min read
Cara Setup Reverse Proxy dan SSL Let's Encrypt

Cara Setup Reverse Proxy dan SSL Let's Encrypt

Comments
2 min read
34 malicious packages discovered targeting Solana developers: Steals wallet credentials and SSH keys

34 malicious packages discovered targeting Solana developers: Steals wallet credentials and SSH keys

Comments
1 min read
AI Jailbreaks, WebGL Fingerprinting, & Post-Quantum Crypto Defenses

AI Jailbreaks, WebGL Fingerprinting, & Post-Quantum Crypto Defenses

Comments
4 min read
I scanned 8 popular open-source repos for outdated dependencies and CVEs. Here's what I found.

I scanned 8 popular open-source repos for outdated dependencies and CVEs. Here's what I found.

Comments
5 min read
The MCP attack your code review cannot see

The MCP attack your code review cannot see

Comments 2
4 min read
AI needs a brake pedal before the next model jump

AI needs a brake pedal before the next model jump

Comments
4 min read
Detect Prototype Pollution in JavaScript: Code Review Checklist

Detect Prototype Pollution in JavaScript: Code Review Checklist

1
Comments
9 min read
Web Security Basics Every Developer Must Know (2026)

Web Security Basics Every Developer Must Know (2026)

1
Comments
5 min read
How to audit an AI agent skill: the 7-check framework we used on 200 skills

How to audit an AI agent skill: the 7-check framework we used on 200 skills

Comments
8 min read
I scanned Plane (50k stars) for bugs. Found 32. Zero false positives.

I scanned Plane (50k stars) for bugs. Found 32. Zero false positives.

Comments
3 min read
Google API Key Deletion Is Not Instant — Here's What Actually Happens

Google API Key Deletion Is Not Instant — Here's What Actually Happens

Comments
2 min read
SSH Bastion Hosts and Jump Servers: Architecture, ProxyJump, and Zero-Trust Patterns

SSH Bastion Hosts and Jump Servers: Architecture, ProxyJump, and Zero-Trust Patterns

Comments
9 min read
How I built an automated SBOM scanner to secure my supply chain 🛡️

How I built an automated SBOM scanner to secure my supply chain 🛡️

1
Comments 1
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.