DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How a Single Unauthenticated POST Turns Langflow Into a Public Python Shell
kkierii profile

How a Single Unauthenticated POST Turns Langflow Into a Public Python Shell

#ai #security #devops #cybersecurity
Comments 1
4 min read
How a web agency keeps every client site secure
cbmouton profile

How a web agency keeps every client site secure

#webdev #security #devops #freelance
Comments
2 min read
Two Retailers, One Attack: What Really Decides Who Survives a Breach
stanleya profile

Two Retailers, One Attack: What Really Decides Who Survives a Breach

#incidentresponse #cybersecurity #websecurity #security
Comments
7 min read
89 drones hit the water simultaneously: the RF failure mode every event tech operator should model for
xguardsecurity profile

89 drones hit the water simultaneously: the RF failure mode every event tech operator should model for

#security #drones #eventtech #rfinterference
1
Comments
5 min read
Why I built tmpdrop: a self-hosted, expiring file drop
kin_panho_319240e9b3688c profile

Why I built tmpdrop: a self-hosted, expiring file drop

#node #opensource #ai #security
Comments
4 min read
Agent payment standards are standardizing the cap, not the binding
mspro3210 profile

Agent payment standards are standardizing the cap, not the binding

#ai #security #agents #payments
Comments 17
1 min read
How to triage Java memory-shell clues without unsafe default heap dumps
sec123 profile

How to triage Java memory-shell clues without unsafe default heap dumps

#security #java #incidentresponse #opensource
Comments
3 min read
The Fine-Tuning Trap: How Enterprises Are Accidentally Handing Their IP to AI Providers
faiso0ole profile

The Fine-Tuning Trap: How Enterprises Are Accidentally Handing Their IP to AI Providers

#ai #llm #privacy #security
Comments
7 min read
Your AI Vendor's "Zero Data Training" Clause Won't Hold Up. Here's What the Contract Actually Says.
alaikrm profile

Your AI Vendor's "Zero Data Training" Clause Won't Hold Up. Here's What the Contract Actually Says.

#ai #data #privacy #security
Comments
6 min read
I scanned a "vibe-coded" Python repo. Found 137 security bugs.
ainascan profile

I scanned a "vibe-coded" Python repo. Found 137 security bugs.

#security #ai #python #webdev
Comments
3 min read
How to triage a suspected WebShell without giving AI a shell
sec123 profile

How to triage a suspected WebShell without giving AI a shell

#incidentresponse #security #linux #opensource
Comments
3 min read
What safety boundary should an AI incident investigation tool have?
sec123 profile

What safety boundary should an AI incident investigation tool have?

#incidentresponse #security #ai #opensource
Comments
3 min read
How to investigate a suspicious IP on a Linux server with read-only evidence
sec123 profile

How to investigate a suspicious IP on a Linux server with read-only evidence

#incidentresponse #linux #security #opensource
Comments
3 min read
NIS2 for developers: translate 66 pages of EU regulation into 10 technical controls
ayinedjimi-consultants profile

NIS2 for developers: translate 66 pages of EU regulation into 10 technical controls

#security #compliance #devops #europe
Comments
5 min read
Single-Prompt Safety Scores Are Measuring the Wrong Thing
peremptory profile

Single-Prompt Safety Scores Are Measuring the Wrong Thing

#safety #benchmarks #redteaming #security
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.