DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
4 Ways a Shell Variable Slipped Past Claude Code's Permission Checks
gabrielanhaia profile

4 Ways a Shell Variable Slipped Past Claude Code's Permission Checks

#security #ai #bash #devtools
1
Comments
9 min read
Before AI Runs a Swiss Trade Office, Build the Job Packet
isabelle_dubuis_d858453d7 profile

Before AI Runs a Swiss Trade Office, Build the Job Packet

#ai #automation #business #security
Comments
14 min read
Your .env Is Not Where Your Secrets End Up: Scanning the Bundle You Actually Ship
mrlouiswright profile

Your .env Is Not Where Your Secrets End Up: Scanning the Bundle You Actually Ship

#security #javascript #webdev #devops
Comments 2
4 min read
GPT-5.6 Sol Helped Chain 3 Chrome Bugs in 6 Days on $40K of API Calls. Google Paid $250K
gabrielanhaia profile

GPT-5.6 Sol Helped Chain 3 Chrome Bugs in 6 Days on $40K of API Calls. Google Paid $250K

#news #ai #security #chrome
1
Comments 1
8 min read
Gas Optimization Audit: Steakhouse Financial
dannydoes_2abdf9c profile

Gas Optimization Audit: Steakhouse Financial

#web3 #security #ethereum #defi
Comments
6 min read
An approve button needs to check that the approver didn't file the request
authbyexample1 profile

An approve button needs to check that the approver didn't file the request

#authorization #security #backend #webdev
Comments
1 min read
The quiz hook is a Level 1 control — and the bypass is logged
slabb profile

The quiz hook is a Level 1 control — and the bypass is logged

#ai #security #programming #devops
8
Comments
5 min read
81% of Sites Ship Without a CSP Header. Here Is How to Catch Yours in CI
mrlouiswright profile

81% of Sites Ship Without a CSP Header. Here Is How to Catch Yours in CI

#security #webdev #devops #javascript
Comments 2
4 min read
Our rate limiter lets you through when it breaks, and it never learns your email address
daniel_pertu profile

Our rate limiter lets you through when it breaks, and it never learns your email address

#typescript #redis #webdev #security
Comments 1
7 min read
Why You Shouldn't Build Your Own Authentication From Scratch
_stefano_pinato profile

Why You Shouldn't Build Your Own Authentication From Scratch

#security #authentication #dotnet #aspnetcore
1
Comments
6 min read
Hands-On with the New Amazon CloudFront Support for AWS Lambda Web Functions
irfansatrio profile

Hands-On with the New Amazon CloudFront Support for AWS Lambda Web Functions

#aws #cloudfront #lambda #security
4
Comments
4 min read
CORS is a backend decision, not a dev-server trick
kamrankhandev profile

CORS is a backend decision, not a dev-server trick

#laravel #webdev #api #security
Comments
2 min read
Protocol Upgrade Compatibility Review: Binance CEX
dannydoes_2abdf9c profile

Protocol Upgrade Compatibility Review: Binance CEX

#web3 #security #ethereum #defi
Comments
7 min read
We attacked our own MCP firewall with its source code open. 14 of 17 attacks got through; now 2 of 23 do

Shows a rapid one-day security hardening cycle
alexar76 profile
Alex

We attacked our own MCP firewall with its source code open. 14 of 17 attacks got through; now 2 of 23 do

#mcp #security #ai #opensource
10
Comments 12
10 min read
CVE-2026-20079: Root on Cisco Secure FMC Through a Crafted HTTP Request
kozhevniko profile

CVE-2026-20079: Root on Cisco Secure FMC Through a Crafted HTTP Request

#cisco #cybersecurity #security
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.