DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Smart Contract Vulnerability Surface Analysis: Lido

Smart Contract Vulnerability Surface Analysis: Lido

Comments
7 min read
Security in the AI Era: Every Request Has a Cost — Three Layers of Defense for Your Application

Security in the AI Era: Every Request Has a Cost — Three Layers of Defense for Your Application

1
Comments
12 min read
Testing AI Agent Tool Authorization: Seven Reproducible Failure Cases

Testing AI Agent Tool Authorization: Seven Reproducible Failure Cases

Comments 2
3 min read
A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

Comments
2 min read
Can We Build Smart Mines That Predict Danger Before It Happens?

Can We Build Smart Mines That Predict Danger Before It Happens?

Comments
2 min read
Human Approval Is Not Authorization

Human Approval Is Not Authorization

Comments 2
1 min read
Amazon Cognito Pricing: Tiers, MAU Counting, and the Defaults That Inflate the Bill

Amazon Cognito Pricing: Tiers, MAU Counting, and the Defaults That Inflate the Bill

Comments
11 min read
Splunk's Patroni REST API Runs Operating-System Commands Without a Login

Splunk's Patroni REST API Runs Operating-System Commands Without a Login

Comments
7 min read
Before You Add an AI API to a Business App, Consider These 5 Things

Before You Add an AI API to a Business App, Consider These 5 Things

Comments
6 min read
Your .gitignore Won't Save Your Docker Image

Your .gitignore Won't Save Your Docker Image

Comments
2 min read
The one test that proves no user can see another user's data

The one test that proves no user can see another user's data

Comments
3 min read
Chainlink Staking Is Not L1 PoS: Capacity Caps, Reward Ramps, and a 35-Day Exit

Chainlink Staking Is Not L1 PoS: Capacity Caps, Reward Ramps, and a 35-Day Exit

Comments
4 min read
vLLM's --api-key leaves /invocations, /tokenize and /pause open. Lock it down with an allowlist proxy

vLLM's --api-key leaves /invocations, /tokenize and /pause open. Lock it down with an allowlist proxy

Comments
3 min read
Why Browsers Force File Downloads and How to Preview Binary Data Client-Side

Why Browsers Force File Downloads and How to Preview Binary Data Client-Side

Comments
6 min read
Passkeys Explained Without the Jargon

Passkeys Explained Without the Jargon

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.