DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
One IAM Action Away From Admin: Self-Attach Privilege Escalation
bala_paranj_059d338e44e7e profile

One IAM Action Away From Admin: Self-Attach Privilege Escalation

#security #aws #cloud #appsec
Comments 1
7 min read
Media Password Reset Template Explained: 6 Controls for Localized HTML Email Delivery
jamesanderson3589 profile

Media Password Reset Template Explained: 6 Controls for Localized HTML Email Delivery

#email #security #localization
Comments
7 min read
Addressing the CSA Top Threats to Cloud Computing 2026
bala_paranj_059d338e44e7e profile

Addressing the CSA Top Threats to Cloud Computing 2026

#cloud #security #aws #opensource
1
Comments
8 min read
Oracle Manipulation Risk Report: Gemini
dannydoes_2abdf9c profile

Oracle Manipulation Risk Report: Gemini

#web3 #security #ethereum #defi
Comments
6 min read
Two and a half months with an intruder in our repositories
bpsmartdesign profile

Two and a half months with an intruder in our repositories

#security #github #polinrider #th1nkdev
1
Comments
5 min read
Your attack surface is whatever the internet remembers — and it remembers more than you do
nizar_tuanku profile

Your attack surface is whatever the internet remembers — and it remembers more than you do

#security #devops #networking #opensource
Comments
5 min read
I Tried to Break My Robot Accountant (So Nobody Else Could)
mursalfk profile

I Tried to Break My Robot Accountant (So Nobody Else Could)

#aws #ai #testing #security
3
Comments 2
21 min read
How We Stopped Agentic Scope Escapes: Red-Teaming Our AI Coding Agent
jackymencz profile

How We Stopped Agentic Scope Escapes: Red-Teaming Our AI Coding Agent

#ai #agents #devops #security
Comments
10 min read
The SolarWinds Attack: When One Compromised Vendor Became a Supply-Chain Crisis
saranyo profile

The SolarWinds Attack: When One Compromised Vendor Became a Supply-Chain Crisis

#cybersecurity #infosec #security
Comments
2 min read
I Could Hack My Own Rails App With One Hidden Input
gjhewitt profile

I Could Hack My Own Rails App With One Hidden Input

#rails #ruby #webdev #security
Comments 1
4 min read
1,558 Tests Green and No Auth: The Tests That Never Actually Ran
debashish_ghosal profile

1,558 Tests Green and No Auth: The Tests That Never Actually Ran

#ai #security #programming #testing
20
Comments 5
3 min read
The tenant-safety checklist for an AI endpoint
kgjohnson profile

The tenant-safety checklist for an AI endpoint

#typescript #ai #backend #security
Comments
3 min read
⚔️ ATLOCK v5 vs ATLOCK v4: The Security Battle Begins
akhourianmolkumar profile

⚔️ ATLOCK v5 vs ATLOCK v4: The Security Battle Begins

#showdev #security #python #buildinpublic
8
Comments 3
8 min read
Your AI Coding Agent Can Read .env — Here’s How to Stop Secrets Before They Reach the Cloud
3mre0s profile

Your AI Coding Agent Can Read .env — Here’s How to Stop Secrets Before They Reach the Cloud

#ai #security #go #opensource
1
Comments
5 min read
Measuring internet-exposed RDP surface and what it means for defenders
stark_zhuang_df5076f35c68 profile

Measuring internet-exposed RDP surface and what it means for defenders

#cybersecurity #infosec #security
Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.