DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Hardening Two Multi Tenant SaaS APIs

Hardening Two Multi Tenant SaaS APIs

Comments
9 min read
MCP Deep Dive, Part 6: MCP Authentication With OAuth and Entra ID, Done Right

MCP Deep Dive, Part 6: MCP Authentication With OAuth and Entra ID, Done Right

1
Comments
5 min read
SQL Server updates and patches

SQL Server updates and patches

Comments
1 min read
Drift Protocol $285M Exploit - North Korean APT Attack on Solana

Drift Protocol $285M Exploit - North Korean APT Attack on Solana

Comments
4 min read
Everything's Green Cap.

Everything's Green Cap.

Comments
2 min read
The Security Risk of 'npm install': Why We Built Our UI with Zero Component Libraries

The Security Risk of 'npm install': Why We Built Our UI with Zero Component Libraries

5
Comments
2 min read
I built an offline CLI that audits a legacy PHP app in one command — and shows you the fix

I built an offline CLI that audits a legacy PHP app in one command — and shows you the fix

Comments 1
3 min read
I benchmarked Python AI-app security scanners. Here's what each catches.

I benchmarked Python AI-app security scanners. Here's what each catches.

1
Comments
3 min read
My credential rule reported 842 secrets in vercel/ai. The real count was 0.

The failure of positive-only testing

My credential rule reported 842 secrets in vercel/ai. The real count was 0.

12
Comments 7
11 min read
The Website Was Working Fine. The CMS Wasn't: Understanding Drupalgeddon2

The Website Was Working Fine. The CMS Wasn't: Understanding Drupalgeddon2

Comments
3 min read
How to Anonymize PII in Text with an API

How to Anonymize PII in Text with an API

Comments
5 min read
HIPAA Risk Assessment in 2026: A Healthcare Engineer's Field Guide

HIPAA Risk Assessment in 2026: A Healthcare Engineer's Field Guide

Comments
4 min read
The Map Is Not the Territory — Dep-Aware Agent Between Explorer and Builder

The Map Is Not the Territory — Dep-Aware Agent Between Explorer and Builder

Comments
5 min read
401 Unauthorized Error: Causes and Solutions

401 Unauthorized Error: Causes and Solutions

Comments
4 min read
I claimed an auth bypass in a Next.js LLM proxy. The maintainer refuted in 3 hours with code. I conceded. He closed it cleanly.

I claimed an auth bypass in a Next.js LLM proxy. The maintainer refuted in 3 hours with code. I conceded. He closed it cleanly.

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.