DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What a pinned commit actually buys you when you run someone else's agent

What a pinned commit actually buys you when you run someone else's agent

Comments
3 min read
How Many of a Scanner's Findings Are Real? Web-Vuln-Scanner's Detection Pipeline and False-Positive Control, Measured

How Many of a Scanner's Findings Are Real? Web-Vuln-Scanner's Detection Pipeline and False-Positive Control, Measured

Comments
14 min read
CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

Comments
5 min read
Checking the parts you depend on: libraries and packages

Checking the parts you depend on: libraries and packages

Comments
19 min read
AI Agents Didn't Go Rogue This Fall. We Just Believed Their Reports

AI Agents Didn't Go Rogue This Fall. We Just Believed Their Reports

2
Comments
9 min read
MFA decides who gets in, not how many records they take

MFA decides who gets in, not how many records they take

Comments
9 min read
A great rule, 99% false positives: base rates and careful tuning

A great rule, 99% false positives: base rates and careful tuning

Comments
2 min read
MPC Wallets Without the Hype: Shares, Signing, Recovery and the Bugs That Broke Them

MPC Wallets Without the Hype: Shares, Signing, Recovery and the Bugs That Broke Them

Comments
6 min read
The Second App Problem: Every Hosted Health MCP Is Also an App You Have to Keep Installed

The Second App Problem: Every Hosted Health MCP Is Also an App You Have to Keep Installed

Comments
7 min read
Authentication for Kubernetes Using OpenID (Keycloak)

Authentication for Kubernetes Using OpenID (Keycloak)

1
Comments
26 min read
Stop Storing AWS Access Keys in Your CI/CD Pipeline: How to Connect GitHub Actions and Azure DevOps to AWS With OIDC

Stop Storing AWS Access Keys in Your CI/CD Pipeline: How to Connect GitHub Actions and Azure DevOps to AWS With OIDC

1
Comments
7 min read
Building a Low-Latency Webhook Ingress Gateway with Rust and `io_uring`

Building a Low-Latency Webhook Ingress Gateway with Rust and `io_uring`

Comments
10 min read
Why Transactional Emails Go to Spam: A Debugging Checklist

Why Transactional Emails Go to Spam: A Debugging Checklist

Comments
2 min read
Same MCP version. Different tool description. Who signed it?

Same MCP version. Different tool description. Who signed it?

Comments
5 min read
Apache Atlas metadata access requires more than a login page

Apache Atlas metadata access requires more than a login page

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.