DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass
michael_kantor_c1f32eb919 profile

BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

#cve #security #vulnerability #fastifyjwt
Comments
2 min read
Resilience and Recovery in Security Architecture: Why They Matter for Future DoD Cyber Professionals
martesetemplesr profile

Resilience and Recovery in Security Architecture: Why They Matter for Future DoD Cyber Professionals

#architecture #cybersecurity #security
Comments
4 min read
OpenAI Responses API `user` Migration: Split Safety from Prompt Caching
ssukhpinder profile

OpenAI Responses API `user` Migration: Split Safety from Prompt Caching

#openai #dotnet #csharp #security
5
Comments
4 min read
Securing the Mission: Applying Security Techniques to Computing Resources
martesetemplesr profile

Securing the Mission: Applying Security Techniques to Computing Resources

#cybersecurity #infosec #security
Comments
4 min read
CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files
michael_kantor_c1f32eb919 profile

CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files

#cve #security #vulnerability #accelerate
Comments
4 min read
The Phishing Site Tried to Talk to My AI. That Became the Evidence.
johnnyg1212 profile

The Phishing Site Tried to Talk to My AI. That Became the Evidence.

#googlecloud #ai #security #hackathon
1
Comments
7 min read
Self-Hosted IAM: Roles, Policies, and Instance Profiles Without AWS
toddyholiday profile
Tom

Self-Hosted IAM: Roles, Policies, and Instance Profiles Without AWS

#aws #iam #security #selfhosted
Comments
5 min read
Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed
mukesh_13 profile

Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed

#oauth #auth0 #security #webdev
Comments
4 min read
Claude Sessions Are Being Stolen by Common Infostealer Malware
peremptory profile

Claude Sessions Are Being Stolen by Common Infostealer Malware

#anthropic #security #cybersecurity #aiagents
Comments
3 min read
Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection
ventrova profile

Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection

#ai #security #mcp #llm
Comments
4 min read
The Wildcard Scope Problem: Why MCP Configs Default to admin:* Instead of Least Privilege
ventrova profile

The Wildcard Scope Problem: Why MCP Configs Default to admin:* Instead of Least Privilege

#ai #security #mcp #llm
Comments
3 min read
A GitHub token is not an agent permission model
radim10 profile

A GitHub token is not an agent permission model

#ai #security #agents #webdev
Comments
4 min read
Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates
anoymask profile

Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

#security #threatintel
Comments
8 min read
WebMCP: Give Browser Agents Tools Instead of Buttons
toannhu profile

WebMCP: Give Browser Agents Tools Instead of Buttons

#webdev #ai #javascript #security
Comments
4 min read
Shift Left: Why Security Mindset is a Non-Negotiable Developer Skill
hirdo profile

Shift Left: Why Security Mindset is a Non-Negotiable Developer Skill

#security #webdev #programming #devops
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.