DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The docker-compose port binding that Trivy, Checkov, and Semgrep all miss

The docker-compose port binding that Trivy, Checkov, and Semgrep all miss

Comments
1 min read
We MITM our own email, on purpose: end-to-end encryption without touching the mail client

We MITM our own email, on purpose: end-to-end encryption without touching the mail client

1
Comments 2
10 min read
AI Agent Runtime Policy: Stop Dangerous Tool Calls Before They Execute

AI Agent Runtime Policy: Stop Dangerous Tool Calls Before They Execute

2
Comments
8 min read
Multi-Cloud Identity Federation Attacks: Securing Cross-Platform Access Controls Against AI-Powered Credential Stuffing and Tok…

Multi-Cloud Identity Federation Attacks: Securing Cross-Platform Access Controls Against AI-Powered Credential Stuffing and Tok…

Comments
4 min read
Control before, proof after: an accountability primitive for AI agents

Control before, proof after: an accountability primitive for AI agents

Comments
5 min read
I built an offline CLI that audits a legacy PHP app in one command — and shows you the fix

I built an offline CLI that audits a legacy PHP app in one command — and shows you the fix

Comments
3 min read
How to Anonymize PII in Text with an API

How to Anonymize PII in Text with an API

Comments
5 min read
Bind Email Change Links to the Active Session

Bind Email Change Links to the Active Session

1
Comments
4 min read
VigilOps Launch Article

VigilOps Launch Article

1
Comments
3 min read
I built a security scanner, never shipped it, and finally finished the job

I built a security scanner, never shipped it, and finally finished the job

Comments
3 min read
The receipt cannot be written by the pen it is checking: separation of duties for agent payments

The receipt cannot be written by the pen it is checking: separation of duties for agent payments

Comments
2 min read
# GhostLine Development Update: From Features to Stability

# GhostLine Development Update: From Features to Stability

6
Comments
2 min read
Hardening Kubernetes: How to Block `kubectl debug node` from Breaking Your Cluster Matrix

Hardening Kubernetes: How to Block `kubectl debug node` from Breaking Your Cluster Matrix

1
Comments
3 min read
Why Cursor Keeps Writing Command Injection Into Your Code (CWE-78)

Why Cursor Keeps Writing Command Injection Into Your Code (CWE-78)

1
Comments
2 min read
The Vibe Coding Hangover, Part 2: Your AI Didn't Just Write Bugs, It Wrote Backdoors

The Vibe Coding Hangover, Part 2: Your AI Didn't Just Write Bugs, It Wrote Backdoors

1
Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.