DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
SecureLocal AI: A Local-First Python Security Auditor for Hacktoberfest Week 2

Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle Submission đź’¸

SecureLocal AI: A Local-First Python Security Auditor for Hacktoberfest Week 2

Comments
4 min read
TVL Trend Analysis & Liquidity Risk Assessment: Morpho Blue

TVL Trend Analysis & Liquidity Risk Assessment: Morpho Blue

Comments
6 min read
Node.js Marketplace Verification: 6 Secure SMS OTP Login Flow Lockout and Replay Defenses

Node.js Marketplace Verification: 6 Secure SMS OTP Login Flow Lockout and Replay Defenses

Comments
7 min read
A Passed options Dict: How PyJWT's decode() Silently Rewrote a Caller's Configuration

A Passed options Dict: How PyJWT's decode() Silently Rewrote a Caller's Configuration

Comments
3 min read
An Infostealer Now Grabs .claude.json and Codex's config.toml. Check What Yours Hold

An Infostealer Now Grabs .claude.json and Codex's config.toml. Check What Yours Hold

Comments
7 min read
Let an agent sign in for you without showing the model your password

Let an agent sign in for you without showing the model your password

Comments
4 min read
I Gave an EC2 Instance Zero Internet and It Still Uploaded to S3

I Gave an EC2 Instance Zero Internet and It Still Uploaded to S3

Comments
5 min read
Jailbroken PS5s Running Local AI Models Raise Security and Legal Concerns

Jailbroken PS5s Running Local AI Models Raise Security and Legal Concerns

Comments
11 min read
Protocol Upgrade Compatibility Review: Gauntlet

Protocol Upgrade Compatibility Review: Gauntlet

Comments
7 min read
USDT and USDC Are Not the Same Integer: What Developers Should Check Before Accepting Either

USDT and USDC Are Not the Same Integer: What Developers Should Check Before Accepting Either

Comments
4 min read
Ni8mare: The CVSS 10.0 n8n Flaw That Turns a Webhook Into a Full Server Takeover

Ni8mare: The CVSS 10.0 n8n Flaw That Turns a Webhook Into a Full Server Takeover

Comments
8 min read
My read-only Python scanner accidentally ran a Git helper

My read-only Python scanner accidentally ran a Git helper

Comments
5 min read
CVE-2026-87799 Versus CVE-2026-85185: Symlink Replay and Unvalidated Subvolume Paths Compared

CVE-2026-87799 Versus CVE-2026-85185: Symlink Replay and Unvalidated Subvolume Paths Compared

Comments
3 min read
Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Comments
6 min read
eval() in a straitjacket: running user JavaScript under a strict CSP

eval() in a straitjacket: running user JavaScript under a strict CSP

1
Comments
14 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.