DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to Secure a System with mTLS Certificates (Mutual TLS)

How to Secure a System with mTLS Certificates (Mutual TLS)

1
Comments 4
8 min read
I found a critical CVE in a top AI agent framework. Here's what it taught me about how we're all building agents wrong.

I found a critical CVE in a top AI agent framework. Here's what it taught me about how we're all building agents wrong.

Comments
3 min read
CVE-2026-40871 Mailcow SQLi, Vercel Breach & TPM 2.0 Hardware Attestation

CVE-2026-40871 Mailcow SQLi, Vercel Breach & TPM 2.0 Hardware Attestation

Comments
3 min read
Building a Security Gateway for MCP (Model Context Protocol)

Building a Security Gateway for MCP (Model Context Protocol)

Comments 1
2 min read
Security+ started, 3 tools built, real attacks found on my own machine

Security+ started, 3 tools built, real attacks found on my own machine

Comments
3 min read
Let AI fix your CI" is a supply chain attack waiting to happen. Here's how to do it safely

Let AI fix your CI" is a supply chain attack waiting to happen. Here's how to do it safely

Comments
3 min read
Engineering the Guardian: A Deep Dive into Atomic API Guardrails and Real-Time Systems

Engineering the Guardian: A Deep Dive into Atomic API Guardrails and Real-Time Systems

1
Comments
3 min read
SPENDING_LIMIT Policy: Cap Your AI Agent's Daily Transaction Volume

SPENDING_LIMIT Policy: Cap Your AI Agent's Daily Transaction Volume

Comments
5 min read
Three Vulnerabilities That Quietly Rewrote the Threat Model in 2025

Three Vulnerabilities That Quietly Rewrote the Threat Model in 2025

Comments
8 min read
TOCTOU of Trust: Why Agent Governance Must Be Continuous

TOCTOU of Trust: Why Agent Governance Must Be Continuous

1
Comments
8 min read
I Built the Middleware Layer MCP is Missing

I Built the Middleware Layer MCP is Missing

Comments
3 min read
How to Prove a File Existed Before a Certain Date Using Bitcoin (21 Sats, No Account)

How to Prove a File Existed Before a Certain Date Using Bitcoin (21 Sats, No Account)

Comments 1
4 min read
JWT is a scam and your app doesn't need it

JWT is a scam and your app doesn't need it

1
Comments
8 min read
Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples)

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples)

Comments
4 min read
Cursor Keeps Writing IDOR Into Your APIs. Here's the Fix.

Cursor Keeps Writing IDOR Into Your APIs. Here's the Fix.

4
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.