DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Postman Variable Mistake That Leaks Tokens (and the 5-Scope Model That Prevents It)
imranalmunyeem profile

The Postman Variable Mistake That Leaks Tokens (and the 5-Scope Model That Prevents It)

#postmanapi #security #testing #api
Comments
3 min read
We Built an AI Agent That Intentionally Breaks Code to Fix It Before Hackers Do
inkwavebytes profile

We Built an AI Agent That Intentionally Breaks Code to Fix It Before Hackers Do

#watercooler #python #ai #security
5
Comments 2
1 min read
Authentication Audit Trails: Correlating Risk Events with Session Lifecycle Actions
lukasschmidt295 profile

Authentication Audit Trails: Correlating Risk Events with Session Lifecycle Actions

#authentication #security #audit
Comments
7 min read
From community review to a shipped security hardening with Codex
oitydobcrypto profile

From community review to a shipped security hardening with Codex

#opensource #typescript #supabase #security
1
Comments
3 min read
Manually Proving and Documenting an IDOR (CWE-639) — A Full Walkthrough
jomynn profile

Manually Proving and Documenting an IDOR (CWE-639) — A Full Walkthrough

#api #cybersecurity #security #tutorial
Comments
2 min read
Securing a RAG Pipeline — The Threats I Designed Against and the Ones I Didn't
pgmpofu profile

Securing a RAG Pipeline — The Threats I Designed Against and the Ones I Didn't

#security #rag #python #ai
1
Comments 1
8 min read
sbx: a disposable Docker sandbox for opening untrusted repos in your own IDE
gilad_novik_7e1233113b7c0 profile

sbx: a disposable Docker sandbox for opening untrusted repos in your own IDE

#showdev #interview #security #opensource
1
Comments
2 min read
A Backup You Have Never Restored Is a Wish
sergueyasaelshinder profile

A Backup You Have Never Restored Is a Wish

#sergueyasaelshinder #security #backups #devops
Comments
2 min read
What does "verified" actually mean in your stack?
hirajha profile

What does "verified" actually mean in your stack?

#discuss #programming #security #webdev
Comments
1 min read
Plugin4Shell Hit 26,000 Agents Before Anyone Noticed. Your Coding Agent’s Plugin Store Is the New npm.
numbpill3d profile

Plugin4Shell Hit 26,000 Agents Before Anyone Noticed. Your Coding Agent’s Plugin Store Is the New npm.

#ai #coding #exploit #security
5
Comments 2
7 min read
qm Gives Every Employee Their Own Agent Sandbox Instead of One Shared Brain
renolu profile

qm Gives Every Employee Their Own Agent Sandbox Instead of One Shared Brain

#agents #typescript #slack #security
Comments
4 min read
Who does open source actually depend on? I scanned the 433 most-starred JS repos
ahmed_benhamadi_318b848a1 profile

Who does open source actually depend on? I scanned the 433 most-starred JS repos

#opensource #javascript #node #security
1
Comments
4 min read
The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint
dwayne_mcdaniel profile

The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

#security #devsecops #endpoint #cloud
Comments
8 min read
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins
etairos profile

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

#cybersecurity #infosec #security
Comments
5 min read
Customizing Keycloak: Themes, Login Flows, and Disabled-User Handling
gnauqthebeast profile

Customizing Keycloak: Themes, Login Flows, and Disabled-User Handling

#authentication #docker #java #security
5
Comments 2
19 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.