DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Comments
7 min read
38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

Comments
2 min read
Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Comments
7 min read
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

Comments
8 min read
TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

Comments
7 min read
Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Comments
7 min read
I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

Comments
6 min read
glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

1
Comments
2 min read
Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Comments
3 min read
Approval Is Not a Boolean: What Must Still Be True When an Agent Resumes?

Approval Is Not a Boolean: What Must Still Be True When an Agent Resumes?

3
Comments 10
9 min read
I built a browser-only JWT Creator & Signer — HS256/384/512, verify, expiry check, 77 tests

I built a browser-only JWT Creator & Signer — HS256/384/512, verify, expiry check, 77 tests

Comments
2 min read
I built a CVE scanner for Python/Node with zero dependencies. Here's why that matters.

I built a CVE scanner for Python/Node with zero dependencies. Here's why that matters.

Comments 1
2 min read
Apple Hide My Email Vulnerability, GitHub Hardening Guide, and Advisory Database Trends

Apple Hide My Email Vulnerability, GitHub Hardening Guide, and Advisory Database Trends

Comments
3 min read
What if your security scanner fixed the code too?

What if your security scanner fixed the code too?

5
Comments
1 min read
A senator says a banned AI broke into nearly all NSA systems in hours

A senator says a banned AI broke into nearly all NSA systems in hours

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.