DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

1
Comments
4 min read
NeuroImprint Detector: Audita adapters PEFT para detectar backdoors de privacidad en Federated Learning

NeuroImprint Detector: Audita adapters PEFT para detectar backdoors de privacidad en Federated Learning

Comments 1
3 min read
How Hand-Forged Iron Latches Add Character and Strength to Any Door

How Hand-Forged Iron Latches Add Character and Strength to Any Door

9
Comments 4
1 min read
How Samsung's 2026 Security Update Broke Download Mode (And How to Fix It)

How Samsung's 2026 Security Update Broke Download Mode (And How to Fix It)

Comments 1
3 min read
Managing TLS certificates and JWT keys is still a mess in 2026 — so I built a tool

Managing TLS certificates and JWT keys is still a mess in 2026 — so I built a tool

1
Comments
3 min read
I shipped 35 bugs in my AI chatbot. The scariest one was on the output side.

Treating model output as untrusted input

I shipped 35 bugs in my AI chatbot. The scariest one was on the output side.

13
Comments 19
5 min read
Your coding agent will route around your rules. Here's how to actually stop it.

Your coding agent will route around your rules. Here's how to actually stop it.

10
Comments 13
5 min read
Your AI agent's Skills are code. Stop reviewing them like docs.

Your AI agent's Skills are code. Stop reviewing them like docs.

Comments 2
3 min read
Why 73% of LLM API Calls Are Overpaying

Why 73% of LLM API Calls Are Overpaying

Comments
5 min read
The CSV export vulnerability you probably have (and a one-line fix)

The CSV export vulnerability you probably have (and a one-line fix)

14
Comments 9
1 min read
Passkeys in 2026: A Practical Engineering Guide to Passwordless Auth

Passkeys in 2026: A Practical Engineering Guide to Passwordless Auth

13
Comments 3
6 min read
Five Lessons from Running Incident Response

Five Lessons from Running Incident Response

Comments
2 min read
Scaling MSSP Operations: Reducing Alert Fatigue via Autonomous SOC

Scaling MSSP Operations: Reducing Alert Fatigue via Autonomous SOC

Comments
6 min read
Free API Detects Phishing Pages and Hidden AI Prompt Injection - Open Source

Free API Detects Phishing Pages and Hidden AI Prompt Injection - Open Source

Comments
1 min read
Stop Paying the Cloud Tax: How to Self-Host GitHub Actions on Bare Metal

Stop Paying the Cloud Tax: How to Self-Host GitHub Actions on Bare Metal

Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.