DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Encrypt your .env with AWS KMS: Secrets that never touch process.env

Encrypt your .env with AWS KMS: Secrets that never touch process.env

1
Comments
3 min read
NGINX Heap Overflow (CVE-2026-42945), BitLocker Zero-Day, & Chrome Extension Supply Chain Attack

NGINX Heap Overflow (CVE-2026-42945), BitLocker Zero-Day, & Chrome Extension Supply Chain Attack

1
Comments
3 min read
I Hid a Web Server on My Coworker's MacBook to Make It Talk. Eight Years Later, He Still Locks His Screen.

I Hid a Web Server on My Coworker's MacBook to Make It Talk. Eight Years Later, He Still Locks His Screen.

1
Comments
4 min read
Senior Developer Approach to Permissions in Node.js

Senior Developer Approach to Permissions in Node.js

3
Comments
6 min read
OAuth2 Login with JWT and Refresh Tokens in Spring Boot — The Setup You'll Rebuild Every Time

OAuth2 Login with JWT and Refresh Tokens in Spring Boot — The Setup You'll Rebuild Every Time

Comments
4 min read
Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

Comments
5 min read
Supply Chain Attacks + Stale Credentials: Why This Combination Is So Dangerous in 2026

Supply Chain Attacks + Stale Credentials: Why This Combination Is So Dangerous in 2026

3
Comments
2 min read
I built a Windows lock app that kills Task Manager. Here's how.

I built a Windows lock app that kills Task Manager. Here's how.

6
Comments 7
1 min read
Agentjacking: How AI Coding Agents Get Hijacked Through Their Own Tool Pipeline

Agentjacking: How AI Coding Agents Get Hijacked Through Their Own Tool Pipeline

1
Comments
5 min read
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

1
Comments
4 min read
Leveraging Amazon GuardDuty suppression rules to eliminate noise

Leveraging Amazon GuardDuty suppression rules to eliminate noise

Comments
9 min read
I Replaced My €4.99/Month Password Manager with a Self-Hosted One for €10/Year — Here's Exactly How

I Replaced My €4.99/Month Password Manager with a Self-Hosted One for €10/Year — Here's Exactly How

Comments
4 min read
How to Fix GitHub Push Protection Error

How to Fix GitHub Push Protection Error

Comments
1 min read
KeepAI: a local, open-source API hub that lets AI agents use your apps safely

KeepAI: a local, open-source API hub that lets AI agents use your apps safely

Comments 1
2 min read
What Ad Networks Does CamScanner Use? I Decompiled the APK to Find Out

What Ad Networks Does CamScanner Use? I Decompiled the APK to Find Out

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.