DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files

A crawler name in your logs is a claim: 38% of requests naming a known bot from one Google Cloud network asked for .env files

Comments 1
4 min read
WebSocket subscribe is still authorization

WebSocket subscribe is still authorization

Comments 1
1 min read
Why System Prompts Won't Save Your AI Agent: Building Architectural Injection Immunity

Why System Prompts Won't Save Your AI Agent: Building Architectural Injection Immunity

Comments
2 min read
Phishing Detection Evasion Using Invisible Unicode Characters to Split Financial Terms

Phishing Detection Evasion Using Invisible Unicode Characters to Split Financial Terms

3
Comments 2
8 min read
x402 + MCP: where does the budget check go?

x402 + MCP: where does the budget check go?

3
Comments 1
10 min read
agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents

agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents

5
Comments
8 min read
Securing the AI Pipeline: How to Apply DevSecOps to GenAI

Securing the AI Pipeline: How to Apply DevSecOps to GenAI

Comments
2 min read
I built a QR code phishing scanner for our free API — and ended up writing a PNG decoder from scratch to make it work.

I built a QR code phishing scanner for our free API — and ended up writing a PNG decoder from scratch to make it work.

1
Comments
4 min read
[Quick Notes] RDP Into a Proxmox VM Without Opening It Up to the Network

[Quick Notes] RDP Into a Proxmox VM Without Opening It Up to the Network

Comments
1 min read
Why an AI Agent Can Execute the Same Action Twice

Why an AI Agent Can Execute the Same Action Twice

2
Comments 5
6 min read
OAuth Consent Phishing: The Attack a Password Change Does Not Fix

OAuth Consent Phishing: The Attack a Password Change Does Not Fix

Comments
4 min read
Startup Logistics Transactional Email API vs SMTP — Owning Password Reset Templates

Startup Logistics Transactional Email API vs SMTP — Owning Password Reset Templates

Comments 1
6 min read
How I Run a Full AI Studio Off a USB Drive With Zero Disk Writes

How I Run a Full AI Studio Off a USB Drive With Zero Disk Writes

1
Comments
2 min read
My detector was blind across 1,029 of 6,309 lines and its three tests stayed green

My detector was blind across 1,029 of 6,309 lines and its three tests stayed green

Comments
4 min read
Your AI Agent’s Chain of Thought Is Not an Audit Log

Your AI Agent’s Chain of Thought Is Not an Audit Log

7
Comments 3
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.