DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module

CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module

Comments
3 min read
Perplexity open-sourced SPACE: the VM held, the network rules did not

Perplexity open-sourced SPACE: the VM held, the network rules did not

Comments
3 min read
How AI Generated Phishing Is Changing Employee Security Training

How AI Generated Phishing Is Changing Employee Security Training

Comments
6 min read
Practical Secrets Management in Python: From .env Files to a Secrets Manager

Practical Secrets Management in Python: From .env Files to a Secrets Manager

Comments
6 min read
Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Comments
2 min read
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Comments
3 min read
A mail forwarding rule is persistence that survives a password reset

A mail forwarding rule is persistence that survives a password reset

Comments 1
3 min read
CVE-2026-81963: A Link Following Flaw in the Windows Update Stack Reaches SYSTEM

CVE-2026-81963: A Link Following Flaw in the Windows Update Stack Reaches SYSTEM

Comments
3 min read
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

Comments
3 min read
Governance Attack Surface Review: ether.fi Stake

Governance Attack Surface Review: ether.fi Stake

Comments
7 min read
AWS IAM mistakes teams keep making

AWS IAM mistakes teams keep making

Comments
3 min read
Calendar Invites Without OAuth: Five Things That Bit Us

Calendar Invites Without OAuth: Five Things That Bit Us

Comments
7 min read
Our admin API answers 404 to strangers, and three response headers give the game away

Our admin API answers 404 to strangers, and three response headers give the game away

Comments
5 min read
What survives a screenshot? A small, reproducible test of EXIF, XMP and C2PA metadata

What survives a screenshot? A small, reproducible test of EXIF, XMP and C2PA metadata

Comments
7 min read
Your AI agent has to log in. Keep the password out of its context

Your AI agent has to log in. Keep the password out of its context

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.