DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
If Your AI Agent Has Write Access to Public Repos, Audit It Now — Here's Why

Shows how a single word bypasses guardrails

If Your AI Agent Has Write Access to Public Repos, Audit It Now — Here's Why

38
Comments 24
6 min read
Stop pasting your API keys into ChatGPT: a safer way to feed a codebase to an LLM

Stop pasting your API keys into ChatGPT: a safer way to feed a codebase to an LLM

Comments
2 min read
How Do You Prepare ECS Fargate for a SOC 2 Audit?

How Do You Prepare ECS Fargate for a SOC 2 Audit?

Comments
8 min read
AgentGuard: Open-Source Security Scanning for AI Agent Code

AgentGuard: Open-Source Security Scanning for AI Agent Code

Comments
3 min read
Adding AI Code Review to a Self-Hosted GitLab — Without Handing It the Keys

Adding AI Code Review to a Self-Hosted GitLab — Without Handing It the Keys

Comments
7 min read
Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Comments
4 min read
How to Verify AI Agent Work: State Machines, Approval Gates, and Least-Privilege Access

How to Verify AI Agent Work: State Machines, Approval Gates, and Least-Privilege Access

6
Comments 20
9 min read
How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

Comments
12 min read
Beyond Regex: Building Detection Rules for AI Agent Vulnerabilities

Beyond Regex: Building Detection Rules for AI Agent Vulnerabilities

Comments
3 min read
Chainlink Automation Isn't a Cron Job. It's a Consensus Decision

Chainlink Automation Isn't a Cron Job. It's a Consensus Decision

6
Comments
6 min read
CodeIgniter 4 CSRF Protection in AJAX Forms — The Complete Fix

CodeIgniter 4 CSRF Protection in AJAX Forms — The Complete Fix

2
Comments
6 min read
Let AI Triage Static-Analysis Alerts Without Letting It Hide Bugs

Let AI Triage Static-Analysis Alerts Without Letting It Hide Bugs

Comments
2 min read
[IBM-Tech] 提示词恶意软件杀伤链(The Promptware Kill Chain)剖析

[IBM-Tech] 提示词恶意软件杀伤链(The Promptware Kill Chain)剖析

Comments
1 min read
Stop BOLA Attacks: Securing Laravel APIs with ULIDs 🛡️

Stop BOLA Attacks: Securing Laravel APIs with ULIDs 🛡️

1
Comments
3 min read
What Happens When an SSL Certificate Expires? (And How Agencies Can Prevent It)

What Happens When an SSL Certificate Expires? (And How Agencies Can Prevent It)

1
Comments
11 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.