DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A Photo Vault Is Not a Lock Screen

A Photo Vault Is Not a Lock Screen

Comments
3 min read
Known MCP Vulnerabilities and How an MCP Gateway Blocks Them

Known MCP Vulnerabilities and How an MCP Gateway Blocks Them

1
Comments 2
12 min read
How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

Comments
5 min read
Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Comments
5 min read
Classify an IP by ASN Type: Hosting, Business, ISP

Classify an IP by ASN Type: Hosting, Business, ISP

Comments
9 min read
Part 1: Least-privilege Kubernetes, generated from what eBPF saw

Part 1: Least-privilege Kubernetes, generated from what eBPF saw

Comments
10 min read
Your rate limiter is broken behind a tunnel — the X-Forwarded-For problem

Your rate limiter is broken behind a tunnel — the X-Forwarded-For problem

Comments
2 min read
Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Comments
9 min read
Is 'HIPAA-Eligible' the Same as 'HIPAA-Compliant'? I Audited AWS's List Against the Security Rule

Is 'HIPAA-Eligible' the Same as 'HIPAA-Compliant'? I Audited AWS's List Against the Security Rule

3
Comments
11 min read
Why Developer Experience (DevEx) Is the Key to Zero Vulnerability Debt

Why Developer Experience (DevEx) Is the Key to Zero Vulnerability Debt

Comments
8 min read
weightwatch v0.1: escanea backdoors en modelos open-weight antes de cargarlos

weightwatch v0.1: escanea backdoors en modelos open-weight antes de cargarlos

1
Comments
3 min read
Building a Malware Intelligence Platform: 13 Public Feeds, Knowledge Graph, and Zero Budget

Building a Malware Intelligence Platform: 13 Public Feeds, Knowledge Graph, and Zero Budget

Comments
4 min read
When the `Contact K8S API Server From Container` Rule Runs Silent

When the `Contact K8S API Server From Container` Rule Runs Silent

Comments
2 min read
Securing AI agents: the part the tutorials skip

Securing AI agents: the part the tutorials skip

Comments
3 min read
I built a tool that finds "invisible text" hidden in PDFs — white text, tiny fonts, and the invisible render mode

I built a tool that finds "invisible text" hidden in PDFs — white text, tiny fonts, and the invisible render mode

1
Comments
27 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.