DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I almost sold an audit based on a false positive. Here's how I caught it.

I almost sold an audit based on a false positive. Here's how I caught it.

Comments
3 min read
I Audited a C Graph Algorithm Project and Found 13 Bugs — Including an Auth Bypass That Was Hiding in Plain Sight

I Audited a C Graph Algorithm Project and Found 13 Bugs — Including an Auth Bypass That Was Hiding in Plain Sight

Comments
6 min read
Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

1
Comments
6 min read
Project access is not object permission

Project access is not object permission

Comments
1 min read
One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

1
Comments
3 min read
ICANN and Verisign: why 22,000 .name domains will be deleted

ICANN and Verisign: why 22,000 .name domains will be deleted

2
Comments 2
9 min read
CloudFormation Least Privilege Can Fail Outside the Service You Think You Are Deploying

CloudFormation Least Privilege Can Fail Outside the Service You Think You Are Deploying

Comments
4 min read
CloudFormation Generated Role Names Can Break Least-Privilege IAM Twice

CloudFormation Generated Role Names Can Break Least-Privilege IAM Twice

Comments
4 min read
GitHub Actions OIDC AccessDenied May Be a Trust-Policy Problem, Not a Permission-Policy Problem

GitHub Actions OIDC AccessDenied May Be a Trust-Policy Problem, Not a Permission-Policy Problem

Comments
3 min read
My AI trading tool would sign a wallet drain as a login challenge

My AI trading tool would sign a wallet drain as a login challenge

1
Comments
5 min read
My First SIEM Deployment: Detecting Threats with Wazuh

My First SIEM Deployment: Detecting Threats with Wazuh

Comments
8 min read
Cross-Chain Bridge Risk Assessment: Gauntlet

Cross-Chain Bridge Risk Assessment: Gauntlet

Comments
7 min read
The AI Code Review Cheat Sheet

The AI Code Review Cheat Sheet

Comments
14 min read
How I Would Build a Private AI Coding Workstation in 2026

How I Would Build a Private AI Coding Workstation in 2026

3
Comments
7 min read
Why CVE-2026-75650 Matters More Than Its CVE Number Suggests

Why CVE-2026-75650 Matters More Than Its CVE Number Suggests

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.