DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives

Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives

Comments 1
2 min read
How to Use CloudTrail to Check Whether You Were Affected by the AWS SSM Agent Vulnerability (CVE-2026-89049)

How to Use CloudTrail to Check Whether You Were Affected by the AWS SSM Agent Vulnerability (CVE-2026-89049)

2
Comments
4 min read
One rounding, not many: why a provably-fair verifier must match the server bit for bit

One rounding, not many: why a provably-fair verifier must match the server bit for bit

Comments 2
7 min read
How Dopamine Works: The Architecture of a Modern iOS Jailbreak

How Dopamine Works: The Architecture of a Modern iOS Jailbreak

8
Comments
7 min read
I bypassed my own Claude Code deny-list in eight ways. Only an allow-list held.

I bypassed my own Claude Code deny-list in eight ways. Only an allow-list held.

Comments 5
4 min read
A happy-path MCP demo proves almost nothing about tenant isolation

A happy-path MCP demo proves almost nothing about tenant isolation

Comments 9
3 min read
Beyond Simple Applets: Event Correlation, Tcl, and a Complete Real-World EEM Build

Beyond Simple Applets: Event Correlation, Tcl, and a Complete Real-World EEM Build

Comments
15 min read
I Gave My AI Assistant the Keys to My Cloud. Here's Why I'm Not Worried.

I Gave My AI Assistant the Keys to My Cloud. Here's Why I'm Not Worried.

6
Comments 6
3 min read
Decoding a PowerShell -EncodedCommand During Incident Response (the UTF-16 gotcha)

Decoding a PowerShell -EncodedCommand During Incident Response (the UTF-16 gotcha)

Comments
4 min read
Circuit Breaker Pattern

Circuit Breaker Pattern

Comments 1
2 min read
Building an iPhone Messenger Without Accounts or Central Servers

Building an iPhone Messenger Without Accounts or Central Servers

Comments
4 min read
FakeAgent, MacSync, AMOS, and PasteSwitch: Malware Distribution Through Trusted Web Services

FakeAgent, MacSync, AMOS, and PasteSwitch: Malware Distribution Through Trusted Web Services

Comments
14 min read
Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Comments 1
6 min read
Security news weekly round-up - 11th September 2026

Security news weekly round-up - 11th September 2026

Comments
3 min read
Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.