DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How a Visual Feature Almost Became a Side-Channel Vulnerability

How a Visual Feature Almost Became a Side-Channel Vulnerability

1
Comments 1
2 min read
Authorize the object, not just the route

Authorize the object, not just the route

Comments 1
1 min read
Your Tenant Isolation Is One Forgotten WHERE Clause Away

Your Tenant Isolation Is One Forgotten WHERE Clause Away

10
Comments
15 min read
Make Free Model Requests Idempotent Before You Add Retries

Make Free Model Requests Idempotent Before You Add Retries

Comments
4 min read
The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

1
Comments
5 min read
Orkes Conductor CVE-2026-58138: Exploitation Activity Observed Against Unauthenticated Workflow RCE

Orkes Conductor CVE-2026-58138: Exploitation Activity Observed Against Unauthenticated Workflow RCE

1
Comments 2
5 min read
The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures

The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures

Comments 2
14 min read
Defending Cisco Secure Email Gateway Against CVE-2026-76442: What to Check Before and After the Patch

Defending Cisco Secure Email Gateway Against CVE-2026-76442: What to Check Before and After the Patch

Comments 1
3 min read
Estar certo não autoriza o método

Estar certo não autoriza o método

Comments
4 min read
Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

Comments
7 min read
A Deny-by-Default Manifest for AI-Generated Services on a Free Server

A Deny-by-Default Manifest for AI-Generated Services on a Free Server

Comments
5 min read
Usage Metering in Go SDKs: Cryptographic Receipts, Tamper-Evident Counters, and the Offline Grace Problem

Usage Metering in Go SDKs: Cryptographic Receipts, Tamper-Evident Counters, and the Offline Grace Problem

Comments 1
6 min read
CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module

CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module

Comments
2 min read
I Read a $320M Ransom Negotiation From My Terminal

I Read a $320M Ransom Negotiation From My Terminal

2
Comments 1
8 min read
Your AI Agent Has Too Many Permissions: A Practical Guide to Not Getting Burned

Your AI Agent Has Too Many Permissions: A Practical Guide to Not Getting Burned

8
Comments 3
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.