DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Durable execution keeps the state. It doesn't keep the rules.

Durable execution keeps the state. It doesn't keep the rules.

Comments
6 min read
Archon's Agent Control API Has No Login by Default and Listens on 0.0.0.0. No Patch Yet

Archon's Agent Control API Has No Login by Default and Listens on 0.0.0.0. No Patch Yet

Comments
7 min read
Test your Node.js fetcher for SSRF in GitHub Actions

Test your Node.js fetcher for SSRF in GitHub Actions

Comments
5 min read
Should Corporates Ban Personal PowerShell Profiles?

Should Corporates Ban Personal PowerShell Profiles?

5
Comments
3 min read
Blue Teaming: How Attackers Use AI and Disposable Infrastructure

Blue Teaming: How Attackers Use AI and Disposable Infrastructure

Comments
5 min read
Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything

Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything

Comments
13 min read
Six audit-contest platforms, six different rules on AI-made findings

Six audit-contest platforms, six different rules on AI-made findings

Comments
4 min read
AI Software Development: Merge Gates Every CTO Should Require

AI Software Development: Merge Gates Every CTO Should Require

Comments
5 min read
Least privilege failed my Pulumi run, and that is the point of this weeks agent debate

Least privilege failed my Pulumi run, and that is the point of this weeks agent debate

Comments
2 min read
AI Is Now Your Security Auditor: What Anthropic's OSS Scanner Means for Open-Source Maintainers

AI Is Now Your Security Auditor: What Anthropic's OSS Scanner Means for Open-Source Maintainers

Comments
3 min read
Hardening an AWS EKS cluster: IRSA, NetworkPolicies, restricted Pod Security and Secrets Manager via CSI

Hardening an AWS EKS cluster: IRSA, NetworkPolicies, restricted Pod Security and Secrets Manager via CSI

Comments
6 min read
From Snapshot to Baseline: Making Today's Counts Useful Tomorrow

From Snapshot to Baseline: Making Today's Counts Useful Tomorrow

Comments
3 min read
48 of our functions are POST endpoints, and the three that read the host page are deliberately not

48 of our functions are POST endpoints, and the three that read the host page are deliberately not

Comments
5 min read
74 minutes before the advisory: graph triage for npm account hijacks

74 minutes before the advisory: graph triage for npm account hijacks

Comments
9 min read
OpenMetadata catalogs on the internet: 1,246 instances and the lineage they expose

OpenMetadata catalogs on the internet: 1,246 instances and the lineage they expose

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.