DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How Do You Log Someone Out of a Stateless System? JWT Invalidation on Logout

How Do You Log Someone Out of a Stateless System? JWT Invalidation on Logout

Comments
6 min read
How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

Comments
3 min read
I'm building Osquil, a schema-aware query workbench for osquery

I'm building Osquil, a schema-aware query workbench for osquery

Comments
3 min read
A regression gate cannot see an already stale signature boundary

A regression gate cannot see an already stale signature boundary

Comments 1
2 min read
my AI-code language is now honest all the way down to WebAssembly

my AI-code language is now honest all the way down to WebAssembly

Comments
10 min read
Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Comments
5 min read
Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

1
Comments
5 min read
atob() can't decode a JWT — the Base64URL gotcha (and the fix)

atob() can't decode a JWT — the Base64URL gotcha (and the fix)

1
Comments
3 min read
Blocking an AI agent's tool call before it runs: runtime verification with LTL3

Blocking an AI agent's tool call before it runs: runtime verification with LTL3

1
Comments 2
4 min read
Capturing Your First Web Request with Wireshark on Windows

Capturing Your First Web Request with Wireshark on Windows

Comments
2 min read
Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Comments
5 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

Comments
5 min read
TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

Comments
5 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
The Nutrition Label That Software Always Lacked

The Nutrition Label That Software Always Lacked

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.