DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

1
Comments
7 min read
Building a RAG assistant that says “I don’t know”: evaluation, security and a $0 deployment

Building a RAG assistant that says “I don’t know”: evaluation, security and a $0 deployment

Comments
6 min read
Reading the CVSS 9.8 score of CVE-2026-108474 without overreading it

Reading the CVSS 9.8 score of CVE-2026-108474 without overreading it

Comments
2 min read
China IP Geo Down to the District: Free Lookup with GB/T 2260 admin_code

China IP Geo Down to the District: Free Lookup with GB/T 2260 admin_code

Comments
4 min read
Claude Traced the NIST Curve Seeds to a 1997 Clock and lrand48. Nothing to Rotate on P-256

Claude Traced the NIST Curve Seeds to a 1997 Clock and lrand48. Nothing to Rotate on P-256

Comments
7 min read
What is prompt injection?

What is prompt injection?

Comments
4 min read
Microsoft Authenticator Not Receiving Notifications: A Read-First Sign-In Log, Device, and Policy Triage

Microsoft Authenticator Not Receiving Notifications: A Read-First Sign-In Log, Device, and Policy Triage

Comments
18 min read
CĂłmo implementar VERI*FACTU en Python paso a paso (huella, XML, QR y envĂ­o a la AEAT)

CĂłmo implementar VERI*FACTU en Python paso a paso (huella, XML, QR y envĂ­o a la AEAT)

Comments
4 min read
Anthropic's 100 Overcharge Bug: What Internationalization Failures Reveal About Agent Payment Pipelines

Anthropic's 100 Overcharge Bug: What Internationalization Failures Reveal About Agent Payment Pipelines

1
Comments
4 min read
Where container secrets actually leak, and the seven habits that stop it

Where container secrets actually leak, and the seven habits that stop it

Comments
7 min read
I Let AI Code a CV Creator App. It Drained Me.

I Let AI Code a CV Creator App. It Drained Me.

Comments 2
20 min read
The Illusion of Progress: how a typo in my custom mutator sent my fuzzer into the wrong parser

The Illusion of Progress: how a typo in my custom mutator sent my fuzzer into the wrong parser

Comments
7 min read
A Score Upload Needs More Than an Accept Attribute

A Score Upload Needs More Than an Accept Attribute

Comments
3 min read
I checked nine free RFC 3161 endpoints against the EU Trusted List. None is qualified. Five of the companies are.

I checked nine free RFC 3161 endpoints against the EU Trusted List. None is qualified. Five of the companies are.

1
Comments
6 min read
XSS: When Your Own Site Runs the Attacker's Code

XSS: When Your Own Site Runs the Attacker's Code

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.