DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Introducing AIGoat 2.0: Hands-On Security Labs for LLMs, RAG, MCP, and AI Agents

Introducing AIGoat 2.0: Hands-On Security Labs for LLMs, RAG, MCP, and AI Agents

Comments
4 min read
One User, Two UIDs: NFSv4, Kerberos, and Docker on a Domain-Joined TrueNAS

One User, Two UIDs: NFSv4, Kerberos, and Docker on a Domain-Joined TrueNAS

Comments
17 min read
Stock Trading Watchlist Access Control: Deterministic Realtime Moderator Tests

Stock Trading Watchlist Access Control: Deterministic Realtime Moderator Tests

Comments
8 min read
Introducing the MCP Proxy Firewall: Stop Poisoned Neighbors Before They Poison You

Introducing the MCP Proxy Firewall: Stop Poisoned Neighbors Before They Poison You

Comments
3 min read
The 4 things I check before launching an AI-built app

The 4 things I check before launching an AI-built app

Comments
2 min read
What to have ready before your first smart contract audit

What to have ready before your first smart contract audit

1
Comments
4 min read
Security Audit Report: Reentrancy & Access Control Review: Ethena USDe

Security Audit Report: Reentrancy & Access Control Review: Ethena USDe

Comments
7 min read
Our admin panel answers 404 to every signed-in account that is not on a hardcoded list

Our admin panel answers 404 to every signed-in account that is not on a hardcoded list

Comments
4 min read
Verifying Intel TDX and NVIDIA GPU attestation from inside a rented VM, and what it can't prove

Verifying Intel TDX and NVIDIA GPU attestation from inside a rented VM, and what it can't prove

1
Comments
3 min read
A Nonce Is Not Replay Protection Until Someone Enforces It

A Nonce Is Not Replay Protection Until Someone Enforces It

Comments
3 min read
Infisical duplicate secrets: which copy is live? Check before you delete

Infisical duplicate secrets: which copy is live? Check before you delete

Comments
5 min read
Before an AI Agent Touches Personal Data, Build This Control Ledger

Before an AI Agent Touches Personal Data, Build This Control Ledger

Comments
16 min read
A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

Comments
2 min read
Testing AI Agent Tool Authorization: Seven Reproducible Failure Cases

Testing AI Agent Tool Authorization: Seven Reproducible Failure Cases

Comments 2
3 min read
Screenshots aren't evidence. Here's what is.

Screenshots aren't evidence. Here's what is.

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.