DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
OIDC Workload Identity Federation in CI/CD: das Ende langlebiger Cloud-Secrets
manuel_engelhardt_e793c88 profile

OIDC Workload Identity Federation in CI/CD: das Ende langlebiger Cloud-Secrets

#oidc #githubactions #aws #security
Comments
4 min read
When a silent failure hit you, what did it actually cost?
aditya_mishra_2417 profile

When a silent failure hit you, what did it actually cost?

#ai #webdev #security #devops
3
Comments 3
1 min read
The Permanent Halt That Lasts Until the Next Restart
arakas4488cmd profile

The Permanent Halt That Lasts Until the Next Restart

#programming #security #fintech #testing
Comments 1
4 min read
The Guard That Counts the Wrong Thing
arakas4488cmd profile

The Guard That Counts the Wrong Thing

#programming #security #fintech #testing
Comments 1
4 min read
A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files
reesecalder profile

A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files

#security #webdev #ai #devops
Comments 1
4 min read
Phishing Detection Evasion Using Invisible Unicode Characters to Split Financial Terms
anoymask profile

Phishing Detection Evasion Using Invisible Unicode Characters to Split Financial Terms

#security #threatintel
3
Comments 2
8 min read
WebSocket subscribe is still authorization
authbyexample1 profile

WebSocket subscribe is still authorization

#security #api #webdev #cybersecurity
Comments 1
1 min read
Why System Prompts Won't Save Your AI Agent: Building Architectural Injection Immunity
igorganapolsky profile

Why System Prompts Won't Save Your AI Agent: Building Architectural Injection Immunity

#ai #security #architecture #opensource
Comments
2 min read
agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents
magopredator profile
Fenix

agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents

#ai #security #python #dfir
5
Comments
8 min read
Securing the AI Pipeline: How to Apply DevSecOps to GenAI
ayan_mohamed profile

Securing the AI Pipeline: How to Apply DevSecOps to GenAI

#ai #cybersecurity #devops #security
Comments
2 min read
x402 + MCP: where does the budget check go?
prakash_rao profile

x402 + MCP: where does the budget check go?

#mcp #ai #architecture #security
3
Comments 1
10 min read
I built a QR code phishing scanner for our free API — and ended up writing a PNG decoder from scratch to make it work.
presend profile

I built a QR code phishing scanner for our free API — and ended up writing a PNG decoder from scratch to make it work.

#javascript #webdev #security #api
1
Comments
4 min read
Why an AI Agent Can Execute the Same Action Twice
stringsofthemindoss profile
Once

Why an AI Agent Can Execute the Same Action Twice

#ai #opensource #devops #security
2
Comments 5
6 min read
[Quick Notes] RDP Into a Proxmox VM Without Opening It Up to the Network
lugerlogic profile

[Quick Notes] RDP Into a Proxmox VM Without Opening It Up to the Network

#linux #proxmox #ops #security
Comments
1 min read
OAuth Consent Phishing: The Attack a Password Change Does Not Fix
tuxxin profile

OAuth Consent Phishing: The Attack a Password Change Does Not Fix

#security #oauth #phishing #fbi
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.