DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

Comments
5 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
The Nutrition Label That Software Always Lacked

The Nutrition Label That Software Always Lacked

Comments
4 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Comments 2
11 min read
FIFA World Cup 2026 Stadium Security Scan

FIFA World Cup 2026 Stadium Security Scan

Comments
2 min read
SOE Compliant Office Agent Skill System: 20 Skills Across 3 Domains

SOE Compliant Office Agent Skill System: 20 Skills Across 3 Domains

Comments
3 min read
Zero Human Auth for AI Agents: How to Replace OAuth with Cryptographic Passport

Zero Human Auth for AI Agents: How to Replace OAuth with Cryptographic Passport

Comments
7 min read
Every vendor says they detect AI agents. None of them can.

Every vendor says they detect AI agents. None of them can.

5
Comments
1 min read
Cursor Learned to Code From Tutorials That Skip Security

Cursor Learned to Code From Tutorials That Skip Security

5
Comments 1
5 min read
10 Signs Your Windows PC May Be Compromised and How to Monitor Them

10 Signs Your Windows PC May Be Compromised and How to Monitor Them

Comments
3 min read
SPF's 10-lookup limit: why your SPF silently fails, and how to fix it

SPF's 10-lookup limit: why your SPF silently fails, and how to fix it

Comments
4 min read
A 2-minute pre-commit hook that stops you from committing API keys

A 2-minute pre-commit hook that stops you from committing API keys

Comments
2 min read
Test Management Compliance: Cloud SaaS vs Local-First

Test Management Compliance: Cloud SaaS vs Local-First

Comments
3 min read
Why We Test Row-Level Security Against a Real Postgres Database, Not Mocks

Why We Test Row-Level Security Against a Real Postgres Database, Not Mocks

6
Comments 1
4 min read
Your bot detection works perfectly. That's the problem.

Your bot detection works perfectly. That's the problem.

Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.