DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Known MCP Vulnerabilities and How an MCP Gateway Blocks Them

Known MCP Vulnerabilities and How an MCP Gateway Blocks Them

1
Comments 2
12 min read
A Photo Vault Is Not a Lock Screen

A Photo Vault Is Not a Lock Screen

Comments
3 min read
How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

Comments
5 min read
Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Comments
5 min read
Classify an IP by ASN Type: Hosting, Business, ISP

Classify an IP by ASN Type: Hosting, Business, ISP

Comments
9 min read
Part 1: Least-privilege Kubernetes, generated from what eBPF saw

Part 1: Least-privilege Kubernetes, generated from what eBPF saw

Comments
10 min read
Is 'HIPAA-Eligible' the Same as 'HIPAA-Compliant'? I Audited AWS's List Against the Security Rule

Is 'HIPAA-Eligible' the Same as 'HIPAA-Compliant'? I Audited AWS's List Against the Security Rule

3
Comments
11 min read
Your rate limiter is broken behind a tunnel — the X-Forwarded-For problem

Your rate limiter is broken behind a tunnel — the X-Forwarded-For problem

Comments
2 min read
Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Comments
9 min read
weightwatch v0.1: escanea backdoors en modelos open-weight antes de cargarlos

weightwatch v0.1: escanea backdoors en modelos open-weight antes de cargarlos

1
Comments
3 min read
Why Developer Experience (DevEx) Is the Key to Zero Vulnerability Debt

Why Developer Experience (DevEx) Is the Key to Zero Vulnerability Debt

Comments
8 min read
Securing AI agents: the part the tutorials skip

Securing AI agents: the part the tutorials skip

Comments
3 min read
When the `Contact K8S API Server From Container` Rule Runs Silent

When the `Contact K8S API Server From Container` Rule Runs Silent

Comments
2 min read
Building a Malware Intelligence Platform: 13 Public Feeds, Knowledge Graph, and Zero Budget

Building a Malware Intelligence Platform: 13 Public Feeds, Knowledge Graph, and Zero Budget

Comments
4 min read
I built a tool that finds "invisible text" hidden in PDFs — white text, tiny fonts, and the invisible render mode

I built a tool that finds "invisible text" hidden in PDFs — white text, tiny fonts, and the invisible render mode

1
Comments
27 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.