DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Check each agent action after you grant the tool

Check each agent action after you grant the tool

Comments
5 min read
The model asked "is this ethical?" — then spent the money anyway

The model asked "is this ethical?" — then spent the money anyway

1
Comments
3 min read
A Public Key Is Not Permission

A Public Key Is Not Permission

Comments
3 min read
Supabase RLS Security: Why AI-Generated Code Is Leaking Your Data (And How to Fix It)

Supabase RLS Security: Why AI-Generated Code Is Leaking Your Data (And How to Fix It)

Comments
7 min read
Is the NVIDIA App MCP Server Safe to Leave On? 12 Tools Counted, One Live Gate Test

Is the NVIDIA App MCP Server Safe to Leave On? 12 Tools Counted, One Live Gate Test

Comments
3 min read
Disclosure Doubled and Exploitation Followed: What GTIG's AI-Era Data Actually Shows

Disclosure Doubled and Exploitation Followed: What GTIG's AI-Era Data Actually Shows

Comments
7 min read
Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774)

Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774)

Comments
3 min read
An OpenAI Model Paid Its Gas From a Stranger's Test Wallet, Then Didn't Say So

An OpenAI Model Paid Its Gas From a Stranger's Test Wallet, Then Didn't Say So

Comments
7 min read
Content Security Policy (CSP) no NestJS: protegendo sua aplicação com Helmet

Content Security Policy (CSP) no NestJS: protegendo sua aplicação com Helmet

1
Comments
4 min read
Securing AI Agents: Plan Approvals & MCP Canonicalization

Securing AI Agents: Plan Approvals & MCP Canonicalization

Comments
6 min read
The NetScaler Payloads That Create Their Own Superusers and Hide in CSS URLs

The NetScaler Payloads That Create Their Own Superusers and Hide in CSS URLs

Comments
7 min read
CPCSC physical security: access control and CCTV

CPCSC physical security: access control and CCTV

Comments
4 min read
An admin can't delete their own account: two lines of defense in my users destroy endpoint

An admin can't delete their own account: two lines of defense in my users destroy endpoint

Comments
2 min read
The Open Letter on AI and Cybersecurity and the Evidence for Agent Containment

The Open Letter on AI and Cybersecurity and the Evidence for Agent Containment

Comments
17 min read
Why Cursor Fixes Firestore Permission Errors by Opening the Rules

Why Cursor Fixes Firestore Permission Errors by Opening the Rules

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.