DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
My robots.txt check passed for six days on an attacker's robots.txt

My robots.txt check passed for six days on an attacker's robots.txt

Comments 1
5 min read
One IAM Action Away From Admin: Self-Attach Privilege Escalation

One IAM Action Away From Admin: Self-Attach Privilege Escalation

Comments 1
7 min read
Media Password Reset Template Explained: 6 Controls for Localized HTML Email Delivery

Media Password Reset Template Explained: 6 Controls for Localized HTML Email Delivery

Comments
7 min read
Addressing the CSA Top Threats to Cloud Computing 2026

Addressing the CSA Top Threats to Cloud Computing 2026

1
Comments
8 min read
Oracle Manipulation Risk Report: Gemini

Oracle Manipulation Risk Report: Gemini

Comments
6 min read
Two and a half months with an intruder in our repositories

Two and a half months with an intruder in our repositories

1
Comments
5 min read
Your attack surface is whatever the internet remembers — and it remembers more than you do

Your attack surface is whatever the internet remembers — and it remembers more than you do

Comments
5 min read
I Tried to Break My Robot Accountant (So Nobody Else Could)

I Tried to Break My Robot Accountant (So Nobody Else Could)

3
Comments 2
21 min read
How We Stopped Agentic Scope Escapes: Red-Teaming Our AI Coding Agent

How We Stopped Agentic Scope Escapes: Red-Teaming Our AI Coding Agent

Comments
10 min read
The SolarWinds Attack: When One Compromised Vendor Became a Supply-Chain Crisis

The SolarWinds Attack: When One Compromised Vendor Became a Supply-Chain Crisis

Comments
2 min read
I Could Hack My Own Rails App With One Hidden Input

I Could Hack My Own Rails App With One Hidden Input

Comments 1
4 min read
The tenant-safety checklist for an AI endpoint

The tenant-safety checklist for an AI endpoint

Comments
3 min read
1,558 Tests Green and No Auth: The Tests That Never Actually Ran

1,558 Tests Green and No Auth: The Tests That Never Actually Ran

20
Comments 5
3 min read
Your AI Coding Agent Can Read .env — Here’s How to Stop Secrets Before They Reach the Cloud

Your AI Coding Agent Can Read .env — Here’s How to Stop Secrets Before They Reach the Cloud

1
Comments
5 min read
⚔️ ATLOCK v5 vs ATLOCK v4: The Security Battle Begins

⚔️ ATLOCK v5 vs ATLOCK v4: The Security Battle Begins

8
Comments 3
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.