DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Mapping mcp.json Misconfigurations to the OWASP MCP Top 10
ventrova profile

Mapping mcp.json Misconfigurations to the OWASP MCP Top 10

#mcp #security #llm #opensource
1
Comments
3 min read
sentinel-scan-cli vs Cisco mcp-scanner vs Snyk Agent Scan: comparing open-source MCP security scanners
ventrova profile

sentinel-scan-cli vs Cisco mcp-scanner vs Snyk Agent Scan: comparing open-source MCP security scanners

#mcp #security #llm #opensource
1
Comments
7 min read
AWS Security Events Through the Lens of the Seven MITRE ATT&CK Tactics
nishikawaakira profile

AWS Security Events Through the Lens of the Seven MITRE ATT&CK Tactics

#aws #cloudtrail #security
1
Comments
12 min read
I Rate-Limited My Own API. Then I Found a Way to Bypass It Myself.
virendravyas profile

I Rate-Limited My Own API. Then I Found a Way to Bypass It Myself.

#security #dotnet #api #webdev
Comments
3 min read
Two Strangers Built an Agent Mandate Protocol in My Comments. It Still Needs a Regulator.

Readers designed a payment protocol
mickyarun profile

Two Strangers Built an Agent Mandate Protocol in My Comments. It Still Needs a Regulator.

#discuss #ai #agents #security
23
Comments 72
5 min read
Building a Secure Self-Hosted Observability Pipeline for an AI Evaluation Platform
starkprince profile

Building a Secure Self-Hosted Observability Pipeline for an AI Evaluation Platform

#azure #security #devops #ai
2
Comments
8 min read
What a Zero-Network MCP Scanner Can (and Can't) Catch: All 10 Heuristics, Honestly
ventrova profile

What a Zero-Network MCP Scanner Can (and Can't) Catch: All 10 Heuristics, Honestly

#security #mcp #llm #staticanalysis
Comments
4 min read
Your AI Agent Will Follow a Stranger's Instructions. Here's How I Actually Test For It.
rudratosh profile

Your AI Agent Will Follow a Stranger's Instructions. Here's How I Actually Test For It.

#ai #security #python #opensource
5
Comments 4
5 min read
Attestkeep 1.0 is out, and three readers changed it before it shipped
arifkurnaz profile

Attestkeep 1.0 is out, and three readers changed it before it shipped

#showdev #kubernetes #security #devops
Comments
8 min read
Catch MCP Tool-Poisoning and Prompt-Injection Regressions on Every PR (GitHub Actions + pre-commit)
ventrova profile

Catch MCP Tool-Poisoning and Prompt-Injection Regressions on Every PR (GitHub Actions + pre-commit)

#security #mcp #cicd #llm
Comments
6 min read
Stop XSS Attacks Cold: An Introduction to Content Security Policy (CSP)
saurav_tb_pandey profile

Stop XSS Attacks Cold: An Introduction to Content Security Policy (CSP)

#contentsecuritypolicy #security #webdev #javascript
1
Comments
3 min read
What GitHub's pull_request_target changes break in the 1,000 most-starred repositories
unite_andcreateforlife profile

What GitHub's pull_request_target changes break in the 1,000 most-starred repositories

#github #security #devops #opensource
Comments 2
4 min read
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing

How AI agents amplify ancient security flaws
andychiare profile

Confused Deputy: The Old Bug That AI Agents Keep Reintroducing

#security #ai #vulnerabilities
7
Comments 8
9 min read
I Added Cryptographic Receipts to MCP Tool Calls in 20 Lines of Code
correctover profile

I Added Cryptographic Receipts to MCP Tool Calls in 20 Lines of Code

#mcp #security #typescript #python
1
Comments
8 min read
Static-scanning MCP tool manifests before you install them
ventrova profile

Static-scanning MCP tool manifests before you install them

#security #mcp #devtools
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.