DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

Comments
4 min read
From CTF Flags to Building a Python-Based Hybrid Encryption Tool for "Harvest Now, Decrypt Later"

From CTF Flags to Building a Python-Based Hybrid Encryption Tool for "Harvest Now, Decrypt Later"

Comments
4 min read
The State of MCP Server Security in 2026: What We Learned Auditing the Ecosystem

The State of MCP Server Security in 2026: What We Learned Auditing the Ecosystem

Comments
5 min read
I Built an Open-Source Immune System for LLMs That Detects Jailbreaks in 3ms — Here's What I Found Auditing Lakera Guard

I Built an Open-Source Immune System for LLMs That Detects Jailbreaks in 3ms — Here's What I Found Auditing Lakera Guard

1
Comments
8 min read
SA-CONTRIB-2026-011: Material Icons Access Bypass — Route Protection Gone Wrong

SA-CONTRIB-2026-011: Material Icons Access Bypass — Route Protection Gone Wrong

1
Comments
3 min read
Securing OAuth 2.1 with Mandatory PKCE and Token Binding

Securing OAuth 2.1 with Mandatory PKCE and Token Binding

Comments
6 min read
Multi-Vector Convergence: Outlook Add-Ins, Zero-Days & AI Malware

Multi-Vector Convergence: Outlook Add-Ins, Zero-Days & AI Malware

Comments
5 min read
We Scanned 33 MCP Servers — Here's What We Found

We Scanned 33 MCP Servers — Here's What We Found

Comments
6 min read
Why I Built a Secure Open-Source AI Agent After Seeing OpenClaw's 512 CVEs

Why I Built a Secure Open-Source AI Agent After Seeing OpenClaw's 512 CVEs

Comments
2 min read
Common FAPI Misconceptions

Common FAPI Misconceptions

8
Comments
4 min read
Securing the NPM Ecosystem: Introducing Zift The Symbolically-Intelligent Security Engine

Securing the NPM Ecosystem: Introducing Zift The Symbolically-Intelligent Security Engine

6
Comments
4 min read
Roblox Scripts: How the Exploit Community Taught Itself Real Software Engineering

Roblox Scripts: How the Exploit Community Taught Itself Real Software Engineering

4
Comments
5 min read
From Base Images to Runtime Factories: Rebuilding Containers based on Risk

From Base Images to Runtime Factories: Rebuilding Containers based on Risk

1
Comments
4 min read
Designing an ORM-Agnostic Multi-Tenant RBAC System in TypeScript

Designing an ORM-Agnostic Multi-Tenant RBAC System in TypeScript

Comments
2 min read
Automating Cloud Defense with IaC & eBPF on AWS

Automating Cloud Defense with IaC & eBPF on AWS

2
Comments
16 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.