DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How the Hugging Face Incident Could Have Been Avoided

How the Hugging Face Incident Could Have Been Avoided

2
Comments
5 min read
Verify Webhook Signatures Before Your Proxy Rewrites the JSON

Verify Webhook Signatures Before Your Proxy Rewrites the JSON

Comments
1 min read
Facebook Signup Emails Need Origin Checks

Facebook Signup Emails Need Origin Checks

5
Comments
4 min read
Web App Security Scanners Compared: Free vs Paid in 2026

Web App Security Scanners Compared: Free vs Paid in 2026

Comments
7 min read
Open Source. CĂłdigo Abierto.

Open Source. CĂłdigo Abierto.

3
Comments
2 min read
Monitoring Hardened Domain Controllers Without Admin Rights: The Five Permission Layers Nobody Documents

Monitoring Hardened Domain Controllers Without Admin Rights: The Five Permission Layers Nobody Documents

Comments
8 min read
Implementing Mutual TLS (mTLS) in Go Microservices

Implementing Mutual TLS (mTLS) in Go Microservices

1
Comments
5 min read
Prove Your Mobile Upload Removed EXIF GPS Before the Retry Queue Keeps a Copy

Prove Your Mobile Upload Removed EXIF GPS Before the Retry Queue Keeps a Copy

1
Comments 1
1 min read
Create and secure webhooks with the Nylas API

Create and secure webhooks with the Nylas API

Comments
8 min read
📝 Growing pytest into an “Incident Prevention Log” — Stage 3: Authentication, CSRF, and Access Control (51 ➡ 69 Tests)

📝 Growing pytest into an “Incident Prevention Log” — Stage 3: Authentication, CSRF, and Access Control (51 ➡ 69 Tests)

Comments 2
12 min read
Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

Coined by Python's Seth Larson in 2025

Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

136
Comments 100
11 min read
Give your AI sub-agent a budget, not your keys

Give your AI sub-agent a budget, not your keys

Comments 2
2 min read
E4del / PINHOLE Using FTP Banners for Command Retrieval

E4del / PINHOLE Using FTP Banners for Command Retrieval

Comments
5 min read
TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530

TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530

Comments
5 min read
How many npm packages actually run code when you `npm install`? I measured a sample.

How many npm packages actually run code when you `npm install`? I measured a sample.

1
Comments 5
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.