DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

Comments
3 min read
I'm building Osquil, a schema-aware query workbench for osquery

I'm building Osquil, a schema-aware query workbench for osquery

Comments
3 min read
A regression gate cannot see an already stale signature boundary

A regression gate cannot see an already stale signature boundary

Comments 1
2 min read
my AI-code language is now honest all the way down to WebAssembly

my AI-code language is now honest all the way down to WebAssembly

Comments
10 min read
Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Comments
5 min read
atob() can't decode a JWT — the Base64URL gotcha (and the fix)

atob() can't decode a JWT — the Base64URL gotcha (and the fix)

1
Comments
3 min read
Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

1
Comments
5 min read
Capturing Your First Web Request with Wireshark on Windows

Capturing Your First Web Request with Wireshark on Windows

Comments
2 min read
Blocking an AI agent's tool call before it runs: runtime verification with LTL3

Blocking an AI agent's tool call before it runs: runtime verification with LTL3

1
Comments 2
4 min read
TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

Comments
5 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Comments
5 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

Comments
5 min read
The Nutrition Label That Software Always Lacked

The Nutrition Label That Software Always Lacked

Comments
4 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Comments 2
11 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.