DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Session Security in PHP — What Most Developers Get Wrong
kriosa profile

Session Security in PHP — What Most Developers Get Wrong

#php #laravel #security #webdev
1
Comments
8 min read
The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)
david_shibley profile

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

#security #npm #cli #productivity
Comments
5 min read
Building a Network Port Scanner with Go: Concurrency Patterns That Actually Scale
ayinedjimi-consultants profile

Building a Network Port Scanner with Go: Concurrency Patterns That Actually Scale

#go #security #tutorial #programming
1
Comments
5 min read
I Built the Thing My Last Article Said Didn't Exist Yet
coridev profile
Cor E

I Built the Thing My Last Article Said Didn't Exist Yet

#ai #security #opensource #devops
2
Comments
4 min read
My MCP Server's GitHub Token Can Write. The Code That Promises It Never Will Had No Test.
enjoy_kumawat profile

My MCP Server's GitHub Token Can Write. The Code That Promises It Never Will Had No Test.

#security #mcp #python #ai
1
Comments 3
4 min read
I blocked XSS attacks and API Key extraction in the browser by monkey-patching `crypto.subtle`. Why isn't everyone doing this?
fortresschart_dev profile
Deve

I blocked XSS attacks and API Key extraction in the browser by monkey-patching `crypto.subtle`. Why isn't everyone doing this?

#javascript #security #fintech
Comments
1 min read
7 JWT Security Mistakes I See in Almost Every Auth Implementation
auth_parse_ profile

7 JWT Security Mistakes I See in Almost Every Auth Implementation

#jwt #security #webdev #authentication
Comments
2 min read
Your Sandbox Has a Hole in It, and the AI Agent Found It
coridev profile
Cor E

Your Sandbox Has a Hole in It, and the AI Agent Found It

#ai #security #cybersecurity #llm
Comments
4 min read
Common Cryptographic Anti-Patterns to Avoid in Modern APIs
dpande01 profile
Deepak

Common Cryptographic Anti-Patterns to Avoid in Modern APIs

#api #backend #cybersecurity #security
Comments
3 min read
Disruption of Polish CHP: Wind Farm to OT via Private APN
anoymask profile

Disruption of Polish CHP: Wind Farm to OT via Private APN

#security #threatintel
Comments 2
8 min read
Product Leadership in the AI Era: Intent Governance and Token Economics
guy_livne profile

Product Leadership in the AI Era: Intent Governance and Token Economics

#ai #architecture #security #product
Comments 1
1 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
mohamed_aboelkheir profile

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

#security #appsec #codereview #cybersecurity
Comments 2
11 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install
demivalerith profile

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

#security #javascript #devops #npm
1
Comments
3 min read
Security news weekly round-up - 7th August 2026
ziizium profile

Security news weekly round-up - 7th August 2026

#security
1
Comments
4 min read
How to Block SQL Injection Attacks with a Free WAF
lialiago profile
Lia

How to Block SQL Injection Attacks with a Free WAF

#security #webdev #devops #cybersecurity
5
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.