DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
You Capped Request Bodies at Ten Megabytes and Measured Them Before Unzipping

You Capped Request Bodies at Ten Megabytes and Measured Them Before Unzipping

Comments
2 min read
Three front doors, tested by something without a phone

Three front doors, tested by something without a phone

Comments
3 min read
I scanned 36 public MCP servers for SSRF. 482 findings, 0 real bugs.

I scanned 36 public MCP servers for SSRF. 482 findings, 0 real bugs.

Comments
1 min read
Linux Privilege Escalation: Why One SUID Binary Gives Attackers Root (And How to Fix It)

Linux Privilege Escalation: Why One SUID Binary Gives Attackers Root (And How to Fix It)

3
Comments
4 min read
What happens to your code when an AI reviews your pull request?

What happens to your code when an AI reviews your pull request?

Comments
2 min read
Your CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)

Your CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)

Comments
3 min read
How to Map Untrusted Inputs in an AI Assistant

How to Map Untrusted Inputs in an AI Assistant

Comments
4 min read
AI agents connected to ERP and CRM via MCP: security risks and the controls to put in place

AI agents connected to ERP and CRM via MCP: security risks and the controls to put in place

Comments
7 min read
Bug of the week #1, solved: one extra JSON field made a member an admin

Bug of the week #1, solved: one extra JSON field made a member an admin

Comments
3 min read
Eight things happened in AI today; the one worth your attention is New York RAISE Act.

Eight things happened in AI today; the one worth your attention is New York RAISE Act.

2
Comments
2 min read
Same Policy, Different Enforcement: Translating Firewall Rules Across Clouds Without Opening Holes

Same Policy, Different Enforcement: Translating Firewall Rules Across Clouds Without Opening Holes

Comments
5 min read
My WordPress maintenance checklist, and what changes on IIS

My WordPress maintenance checklist, and what changes on IIS

Comments
9 min read
AlphaProof Code: A Developer's Checklist Before You Trust an AI-Verified Codebase

AlphaProof Code: A Developer's Checklist Before You Trust an AI-Verified Codebase

Comments
4 min read
Diluting Poisoned Data Made the Backdoor Stronger: Anthropic's 'Homeopathic Learning' Explained

Diluting Poisoned Data Made the Backdoor Stronger: Anthropic's 'Homeopathic Learning' Explained

Comments
4 min read
NETO: Chat P2P local para equipos dev sin nube ni excusas

NETO: Chat P2P local para equipos dev sin nube ni excusas

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.