DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Least privilege failed my Pulumi run, and that is the point of this weeks agent debate

Least privilege failed my Pulumi run, and that is the point of this weeks agent debate

Comments
2 min read
AI Is Now Your Security Auditor: What Anthropic's OSS Scanner Means for Open-Source Maintainers

AI Is Now Your Security Auditor: What Anthropic's OSS Scanner Means for Open-Source Maintainers

Comments
3 min read
Hardening an AWS EKS cluster: IRSA, NetworkPolicies, restricted Pod Security and Secrets Manager via CSI

Hardening an AWS EKS cluster: IRSA, NetworkPolicies, restricted Pod Security and Secrets Manager via CSI

Comments
6 min read
48 of our functions are POST endpoints, and the three that read the host page are deliberately not

48 of our functions are POST endpoints, and the three that read the host page are deliberately not

Comments
5 min read
OpenMetadata catalogs on the internet: 1,246 instances and the lineage they expose

OpenMetadata catalogs on the internet: 1,246 instances and the lineage they expose

1
Comments
2 min read
74 minutes before the advisory: graph triage for npm account hijacks

74 minutes before the advisory: graph triage for npm account hijacks

Comments
9 min read
Append-Only Audit Logs in Postgres with Triggers and Node.js

Append-Only Audit Logs in Postgres with Triggers and Node.js

Comments
5 min read
Post-Quantum Cryptographic Readiness for Legacy Infrastructure

Post-Quantum Cryptographic Readiness for Legacy Infrastructure

Comments
7 min read
AI Sandbox Escape: How Frontier Models Broke Containment

AI Sandbox Escape: How Frontier Models Broke Containment

Comments
4 min read
Your XML Parser Opened a File Because the Document Asked It To

Your XML Parser Opened a File Because the Document Asked It To

Comments
2 min read
Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Why Patch Priority Follows Configuration

Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Why Patch Priority Follows Configuration

Comments
3 min read
A Customer Asked Your Assistant for Its Instructions and It Read Them Out

A Customer Asked Your Assistant for Its Instructions and It Read Them Out

Comments
2 min read
Your trash folder can list deleted records the user was never allowed to open

Your trash folder can list deleted records the user was never allowed to open

4
Comments 1
1 min read
Flash Loan Attack Vector Analysis: PancakeSwap AMM

Flash Loan Attack Vector Analysis: PancakeSwap AMM

1
Comments
6 min read
The config key that runs code: catching the CVE-2026-58659 class_path/_instantiator vector statically

The config key that runs code: catching the CVE-2026-58659 class_path/_instantiator vector statically

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.