DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Demystifying SAST for IaC: How Does Checkov Actually Work Under the Hood?

Demystifying SAST for IaC: How Does Checkov Actually Work Under the Hood?

5
Comments 1
3 min read
Payload CMS Security Best Practices: Top 10 Threats & Mitigation Strategies in 2026

Payload CMS Security Best Practices: Top 10 Threats & Mitigation Strategies in 2026

2
Comments
6 min read
Least Privilege Is Not Enough for AI Agents. You Need Least Agency.

Least Privilege Is Not Enough for AI Agents. You Need Least Agency.

Comments
3 min read
Four Critical CVEs Hit OpenClaw: What You Need to Know (March 2026)

Four Critical CVEs Hit OpenClaw: What You Need to Know (March 2026)

Comments
1 min read
I Finally Understood JWT Auth - After Building Refresh Token Rotation From Scratch

I Finally Understood JWT Auth - After Building Refresh Token Rotation From Scratch

Comments
6 min read
The Vercel Breach Shows the New Shape of Supply-Chain Attacks in 2026

The Vercel Breach Shows the New Shape of Supply-Chain Attacks in 2026

1
Comments 1
5 min read
The Death of LocalStorage: Why Enterprise Apps Use Cookies

The Death of LocalStorage: Why Enterprise Apps Use Cookies

1
Comments 3
3 min read
From Zero to Secure: Setting Up Azure Storage on My DevOps Journey

From Zero to Secure: Setting Up Azure Storage on My DevOps Journey

2
Comments 2
2 min read
OpenClaw 安全加固完全指南(2026)

OpenClaw 安全加固完全指南(2026)

Comments
4 min read
Axios Was Compromised. Here’s What Laravel Developers Need to Check

Axios Was Compromised. Here’s What Laravel Developers Need to Check

1
Comments
6 min read
Palo Alto Unit 42 Just Said It: Agentic Identity Is a Difficult Problem. OAuth2 Has Blind Spots.

Palo Alto Unit 42 Just Said It: Agentic Identity Is a Difficult Problem. OAuth2 Has Blind Spots.

2
Comments
4 min read
I Tested 9 AI Agent Frameworks for Basic Security. None of Them Passed.

I Tested 9 AI Agent Frameworks for Basic Security. None of Them Passed.

1
Comments
4 min read
Why Detection-Based AI Governance Fails (And What to Do Instead)

Why Detection-Based AI Governance Fails (And What to Do Instead)

Comments
4 min read
I Let AI Agents Run My Bug Bounty Program. Here Is What Happened.

I Let AI Agents Run My Bug Bounty Program. Here Is What Happened.

Comments
2 min read
Review: GitGuardian's State of Secrets Sprawl 2026 Turned into Secret-Handling Guardrails for Drupal and WordPress Teams Usin...

Review: GitGuardian's State of Secrets Sprawl 2026 Turned into Secret-Handling Guardrails for Drupal and WordPress Teams Usin...

1
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.