DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

24
Comments 3
13 min read
The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

Comments 1
6 min read
AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

1
Comments 2
3 min read
Are Microsoft Signed Packages Safe? 73 Were Not

Are Microsoft Signed Packages Safe? 73 Were Not

Comments
8 min read
A Hidden Button Is Not an Authorisation Boundary

A Hidden Button Is Not an Authorisation Boundary

Comments
4 min read
Command Injection in PHP — When exec() Becomes an Attack Surface

Command Injection in PHP — When exec() Becomes an Attack Surface

1
Comments
9 min read
Are USB Devices a Security Risk for Your PC?

Are USB Devices a Security Risk for Your PC?

Comments
8 min read
Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Comments
3 min read
Give Your Auditor AWS Access — Without Sharing a Single Credential

Give Your Auditor AWS Access — Without Sharing a Single Credential

Comments
5 min read
How offline license activation actually works

How offline license activation actually works

Comments
3 min read
x402 standardized the handshake. It hasn't standardized the attacks.

x402 standardized the handshake. It hasn't standardized the attacks.

Comments 4
2 min read
Authentication vs Authorization in Cloud Security: Understanding the Difference 🔥

Authentication vs Authorization in Cloud Security: Understanding the Difference 🔥

Comments
3 min read
Applying Checkov SAST to Detect Security Issues in Terraform Infrastructure as Code

Applying Checkov SAST to Detect Security Issues in Terraform Infrastructure as Code

Comments
4 min read
Moving from 'checking reviews' to 'running campaigns': The Agentic workflow shift

Moving from 'checking reviews' to 'running campaigns': The Agentic workflow shift

2
Comments
4 min read
Don't send secrets to your LLM: a pre-send scanner that never stores what it finds

Don't send secrets to your LLM: a pre-send scanner that never stores what it finds

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.