DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Stop Using 'password123': A Developer's Guide to Strong Passwords

Stop Using 'password123': A Developer's Guide to Strong Passwords

Comments
2 min read
An agent that remembers everything is a secret leak with a good memory

An agent that remembers everything is a secret leak with a good memory

2
Comments 2
8 min read
A 9.8 Critical CVE That Never Existed: How to Filter Fake Vulnerabilities Out of Your Java Pipeline

A 9.8 Critical CVE That Never Existed: How to Filter Fake Vulnerabilities Out of Your Java Pipeline

Comments
8 min read
Today's the Deadline: Three Separate CISA Patch Orders Just Collided on the Same Weekend

Today's the Deadline: Three Separate CISA Patch Orders Just Collided on the Same Weekend

1
Comments
4 min read
I built a self-hosted one-time secrets service in Node — here's the threat model

I built a self-hosted one-time secrets service in Node — here's the threat model

1
Comments
2 min read
Treat Copilot Code-Review Instructions as Untrusted Policy Input

Treat Copilot Code-Review Instructions as Untrusted Policy Input

Comments
1 min read
CVE-2026-69836: Entra ID CVSS 10.0 RCE — What Business Owners Should Know

CVE-2026-69836: Entra ID CVSS 10.0 RCE — What Business Owners Should Know

Comments
2 min read
Who Owns the Fix? Bridging the Gap Between Security and Engineering

Who Owns the Fix? Bridging the Gap Between Security and Engineering

Comments
11 min read
How I Stop Webhook Replay Attacks in Node.js & PostgreSQL

How I Stop Webhook Replay Attacks in Node.js & PostgreSQL

Comments
3 min read
Why AI-Generated Code Needs Independent Verification

Why AI-Generated Code Needs Independent Verification

Comments 3
5 min read
I pentested my own AI hub and shipped the method, not the map

I pentested my own AI hub and shipped the method, not the map

6
Comments
6 min read
I Ran 300K Company API Lookups. 40K Hit Military Bases.

I Ran 300K Company API Lookups. 40K Hit Military Bases.

5
Comments
10 min read
Your Keycloak roles aren't working in Spring Security. Here's the actual reason.

Your Keycloak roles aren't working in Spring Security. Here's the actual reason.

Comments 1
3 min read
Navigating Microsoft Azure Certifications in 2026: Value, Trends, and Blueprint Strategy

Navigating Microsoft Azure Certifications in 2026: Value, Trends, and Blueprint Strategy

1
Comments
3 min read
Automatic HTTPS on Kestrel in 2026, now that LettuceEncrypt is archived

Automatic HTTPS on Kestrel in 2026, now that LettuceEncrypt is archived

1
Comments 1
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.