DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Command Injection (CWE-78): From Auto-Detected Finding to Live Exploit to Fixed — Fully Offline

Command Injection (CWE-78): From Auto-Detected Finding to Live Exploit to Fixed — Fully Offline

Comments
4 min read
rag-sanitizer v0.2: escáner de corpus RAG pre-ingestión con embeddings reales y CLIP

rag-sanitizer v0.2: escáner de corpus RAG pre-ingestión con embeddings reales y CLIP

1
Comments
3 min read
Six contracts that pass EXTCODESIZE(owner) > 0 and still withdraw their order

Six contracts that pass EXTCODESIZE(owner) > 0 and still withdraw their order

Comments
6 min read
CompTIA Security+ SY0-701 Domain 3.3: Protecting Data in Modern Organizations

CompTIA Security+ SY0-701 Domain 3.3: Protecting Data in Modern Organizations

Comments
4 min read
SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

Comments
5 min read
Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

Comments
6 min read
Your database dumps are protected by an .htaccess. Your server may not read it.

Your database dumps are protected by an .htaccess. Your server may not read it.

Comments
6 min read
OWASP A03 & A04: Understanding Software Supply Chain and Cryptographic Failures

OWASP A03 & A04: Understanding Software Supply Chain and Cryptographic Failures

1
Comments
4 min read
I built a system that attacks its own AI agents every night. Here's what it found — including in Google's own code.

I built a system that attacks its own AI agents every night. Here's what it found — including in Google's own code.

Comments 1
4 min read
GDPR Technical Compliance for UK Developers in 2026

GDPR Technical Compliance for UK Developers in 2026

Comments
13 min read
Hash Chains Protect Every Record Except the One That Matters

Hash Chains Protect Every Record Except the One That Matters

4
Comments
7 min read
I invented a CVE number to test my tool. It was real

I invented a CVE number to test my tool. It was real

Comments
4 min read
Zero-Knowledge Encryption in Password Managers: A Technical Deep Dive

Zero-Knowledge Encryption in Password Managers: A Technical Deep Dive

Comments
5 min read
AI-Powered Malware Detection Why Static Analysis Alone Isn't Enough for Android Security Anymore

AI-Powered Malware Detection Why Static Analysis Alone Isn't Enough for Android Security Anymore

Comments
3 min read
Protecting a personal web app with Cloudflare Access and email OTP

Protecting a personal web app with Cloudflare Access and email OTP

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.