DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets
andreagomez profile

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

#cybersecurity #infosec #security
Comments
3 min read
A mail forwarding rule is persistence that survives a password reset
onaeiuspkz profile

A mail forwarding rule is persistence that survives a password reset

#security #email #persistence
Comments 1
3 min read
CVE-2026-81963: A Link Following Flaw in the Windows Update Stack Reaches SYSTEM
stark_zhuang_df5076f35c68 profile

CVE-2026-81963: A Link Following Flaw in the Windows Update Stack Reaches SYSTEM

#security #vulnerability #exploitedinthewild
Comments
3 min read
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM
devaland profile

A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

#security #cybersecurity #privacy #infosec
Comments
3 min read
Governance Attack Surface Review: ether.fi Stake
dannydoes_2abdf9c profile

Governance Attack Surface Review: ether.fi Stake

#web3 #security #ethereum #defi
Comments
7 min read
AWS IAM mistakes teams keep making
cloudlative profile

AWS IAM mistakes teams keep making

#aws #security #devops #cloud
Comments
3 min read
Calendar Invites Without OAuth: Five Things That Bit Us
mshykov profile

Calendar Invites Without OAuth: Five Things That Bit Us

#slack #webdev #security #javascript
Comments
7 min read
Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants
etairos profile

Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants

#cybersecurity #infosec #security
1
Comments 1
5 min read
Our admin API answers 404 to strangers, and three response headers give the game away
daniel_pertu profile

Our admin API answers 404 to strangers, and three response headers give the game away

#security #nextjs #api #webdev
Comments
5 min read
What survives a screenshot? A small, reproducible test of EXIF, XMP and C2PA metadata
checkaifree profile

What survives a screenshot? A small, reproducible test of EXIF, XMP and C2PA metadata

#ai #security #webdev #opensource
Comments
7 min read
7 mistakes AI coding agents make in Next.js + Supabase apps (and the rules that stop them)
tommy91dev profile

7 mistakes AI coding agents make in Next.js + Supabase apps (and the rules that stop them)

#nextjs #supabase #cursor #security
Comments
2 min read
AI reverse-engineering tools compared: REA, IDA MCP, GhidraMCP and friends (Oct 2026)
leemie8848 profile

AI reverse-engineering tools compared: REA, IDA MCP, GhidraMCP and friends (Oct 2026)

#reverseengineering #ai #mcp #security
Comments
3 min read
Your AI agent has to log in. Keep the password out of its context
autenai profile

Your AI agent has to log in. Keep the password out of its context

#ai #security #mcp #claudecode
Comments
3 min read
How to Preview HTML Code Online Safely: Sandboxed iframes Explained
avinashkori profile

How to Preview HTML Code Online Safely: Sandboxed iframes Explained

#html #security #webdev #javascript
Comments
5 min read
Are presigned URLs a HIPAA risk? The presigned URL gap in HIPAA S3 compliance
bala_paranj_059d338e44e7e profile

Are presigned URLs a HIPAA risk? The presigned URL gap in HIPAA S3 compliance

#hipaa #aws #s3 #security
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.