DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your false positives never complain. So how do you find them?

Your false positives never complain. So how do you find them?

Comments
1 min read
How I Built an AI-Driven Pipeline to Automate My Bug Bounty Recon

How I Built an AI-Driven Pipeline to Automate My Bug Bounty Recon

Comments
1 min read
I put a WAF on the front door. The spam wasn't using the front door.

I put a WAF on the front door. The spam wasn't using the front door.

Comments
4 min read
I Automated My Entire GitOps Security Stack. The First Thing It Blocked Was My Own Salary.

I Automated My Entire GitOps Security Stack. The First Thing It Blocked Was My Own Salary.

32
Comments 7
10 min read
Eight online tools for supply-chain and identity formats

Eight online tools for supply-chain and identity formats

Comments
3 min read
Your Ops Agent’s Chat History Is an Attack Surface: Prompt Injection Just Became an Infrastructure Problem

Your Ops Agent’s Chat History Is an Attack Surface: Prompt Injection Just Became an Infrastructure Problem

Comments
4 min read
Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

1
Comments
6 min read
VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

1
Comments
5 min read
Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

1
Comments
6 min read
JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

1
Comments
5 min read
What Building Multilingual Hair Transplant Clinic Sites Taught Me About Medical Tourism Web Architecture

What Building Multilingual Hair Transplant Clinic Sites Taught Me About Medical Tourism Web Architecture

Comments 1
3 min read
đź”’ Why ATLOCK v4 Is Different: Engineering a Security Suite Instead of Just Another Password Locker

đź”’ Why ATLOCK v4 Is Different: Engineering a Security Suite Instead of Just Another Password Locker

12
Comments
3 min read
Building DeviceTrust: A Practical Approach to Android Fraud Signals

Building DeviceTrust: A Practical Approach to Android Fraud Signals

2
Comments 2
8 min read
We planted a Descope privilege-escalation bug — can your coding agent catch it?

We planted a Descope privilege-escalation bug — can your coding agent catch it?

Comments
2 min read
What's New in Laravel 13.15: Typed Translations and More

What's New in Laravel 13.15: Typed Translations and More

1
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.