DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What I learned auditing an open-source AI-memory SDK (and the bug I found in it)

What I learned auditing an open-source AI-memory SDK (and the bug I found in it)

Comments
3 min read
Smart Contract Vulnerability Surface Analysis: HashKey Exchange

Smart Contract Vulnerability Surface Analysis: HashKey Exchange

Comments
7 min read
I almost sold an audit based on a false positive. Here's how I caught it.

I almost sold an audit based on a false positive. Here's how I caught it.

Comments
3 min read
Secrets Management in a GitOps World: Sealed Secrets vs. External Secrets Operator vs. Vault

Secrets Management in a GitOps World: Sealed Secrets vs. External Secrets Operator vs. Vault

Comments
5 min read
We applied 243 generated Supabase security migrations to real schemas. Here is what broke.

We applied 243 generated Supabase security migrations to real schemas. Here is what broke.

Comments 1
3 min read
9 Best Enterprise AI Gateways With SSO, RBAC, and Audit Logs (2026)

9 Best Enterprise AI Gateways With SSO, RBAC, and Audit Logs (2026)

Comments
17 min read
I Audited a C Graph Algorithm Project and Found 13 Bugs — Including an Auth Bypass That Was Hiding in Plain Sight

I Audited a C Graph Algorithm Project and Found 13 Bugs — Including an Auth Bypass That Was Hiding in Plain Sight

Comments
6 min read
Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

1
Comments
6 min read
Project access is not object permission

Project access is not object permission

Comments
1 min read
One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

1
Comments
3 min read
CloudFormation Generated Role Names Can Break Least-Privilege IAM Twice

CloudFormation Generated Role Names Can Break Least-Privilege IAM Twice

Comments
4 min read
CloudFormation Least Privilege Can Fail Outside the Service You Think You Are Deploying

CloudFormation Least Privilege Can Fail Outside the Service You Think You Are Deploying

Comments
4 min read
GitHub Actions OIDC AccessDenied May Be a Trust-Policy Problem, Not a Permission-Policy Problem

GitHub Actions OIDC AccessDenied May Be a Trust-Policy Problem, Not a Permission-Policy Problem

Comments
3 min read
My AI trading tool would sign a wallet drain as a login challenge

My AI trading tool would sign a wallet drain as a login challenge

1
Comments
5 min read
My First SIEM Deployment: Detecting Threats with Wazuh

My First SIEM Deployment: Detecting Threats with Wazuh

Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.