DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
We Need Fair Witnesses Again

We Need Fair Witnesses Again

Comments
4 min read
From PowerPC file to flag: taking apart chimera, the binary that wraps another binary (Malware Space Village)

From PowerPC file to flag: taking apart chimera, the binary that wraps another binary (Malware Space Village)

Comments
10 min read
You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

Comments
3 min read
PHP2Shell Explained: How AI Found a PHP Bug Hiding Since 2012, and How It Was Fixed

PHP2Shell Explained: How AI Found a PHP Bug Hiding Since 2012, and How It Was Fixed

1
Comments 1
13 min read
Putting the key in the URL fragment: an E2E design for SecretBolt (RFC)

Putting the key in the URL fragment: an E2E design for SecretBolt (RFC)

Comments
7 min read
The Subagent Talked Its Way Onto Your Task: Assignment Is Not a Prompt

The Subagent Talked Its Way Onto Your Task: Assignment Is Not a Prompt

2
Comments 1
9 min read
Stop Guessing Camera Blind Spots on 2D PDFs: Computing EN 62676-4 DORI Cones & 60GHz Fresnel Zones in 3D KML

Stop Guessing Camera Blind Spots on 2D PDFs: Computing EN 62676-4 DORI Cones & 60GHz Fresnel Zones in 3D KML

Comments
2 min read
Record Patch Tuesday, a BeyondTrust Zero-Day and a WordPress Supply Chain Attack: What to Patch This Week

Record Patch Tuesday, a BeyondTrust Zero-Day and a WordPress Supply Chain Attack: What to Patch This Week

Comments
4 min read
PHP2Shell (CVE-2026-109618, CVE-2026-109619): how to check and patch your PHP version

PHP2Shell (CVE-2026-109618, CVE-2026-109619): how to check and patch your PHP version

Comments
4 min read
PicoCTF Crackme-py Writeup — Reverse a Python Password Check

PicoCTF Crackme-py Writeup — Reverse a Python Password Check

Comments
3 min read
How we review AI agent skills for security before publishing them

How we review AI agent skills for security before publishing them

1
Comments
12 min read
Trezor customers targeted with malicious QR code letters after shipping breach

Trezor customers targeted with malicious QR code letters after shipping breach

Comments
5 min read
When the Patch Skips Your Version: What PHP2Shell Cost Governments, and What EOL Adds on Top

When the Patch Skips Your Version: What PHP2Shell Cost Governments, and What EOL Adds on Top

Comments
6 min read
Defender for Cloud in one page (plus a mock case)

Defender for Cloud in one page (plus a mock case)

Comments 1
16 min read
Anthropic Runs 30,000 Agents at Once. What Keeps Them Under Control?

Anthropic Runs 30,000 Agents at Once. What Keeps Them Under Control?

6
Comments 1
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.