DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Turning first-pass host evidence into a DFIR handoff report

Turning first-pass host evidence into a DFIR handoff report

Comments
4 min read
Why Traditional Website Malware Scanners Miss SEO Spam

Why Traditional Website Malware Scanners Miss SEO Spam

Comments
2 min read
Zero-Knowledge Proofs: Proving You Know a Secret Without Revealing It

Zero-Knowledge Proofs: Proving You Know a Secret Without Revealing It

Comments
4 min read
How AI Hunts Vulnerabilities: A Security Researcher's New Partner

How AI Hunts Vulnerabilities: A Security Researcher's New Partner

Comments
3 min read
How a Single Unauthenticated POST Turns Langflow Into a Public Python Shell

How a Single Unauthenticated POST Turns Langflow Into a Public Python Shell

Comments 1
4 min read
How a web agency keeps every client site secure

How a web agency keeps every client site secure

Comments
2 min read
89 drones hit the water simultaneously: the RF failure mode every event tech operator should model for

89 drones hit the water simultaneously: the RF failure mode every event tech operator should model for

1
Comments
5 min read
Why I built tmpdrop: a self-hosted, expiring file drop

Why I built tmpdrop: a self-hosted, expiring file drop

Comments
4 min read
The Fine-Tuning Trap: How Enterprises Are Accidentally Handing Their IP to AI Providers

The Fine-Tuning Trap: How Enterprises Are Accidentally Handing Their IP to AI Providers

Comments
7 min read
How to triage Java memory-shell clues without unsafe default heap dumps

How to triage Java memory-shell clues without unsafe default heap dumps

Comments
3 min read
How to Secure a VPS: The Complete Ubuntu Hardening Guide

How to Secure a VPS: The Complete Ubuntu Hardening Guide

1
Comments 2
4 min read
How to triage a suspected WebShell without giving AI a shell

How to triage a suspected WebShell without giving AI a shell

Comments
3 min read
I scanned a "vibe-coded" Python repo. Found 137 security bugs.

I scanned a "vibe-coded" Python repo. Found 137 security bugs.

Comments
3 min read
Your AI Vendor's "Zero Data Training" Clause Won't Hold Up. Here's What the Contract Actually Says.

Your AI Vendor's "Zero Data Training" Clause Won't Hold Up. Here's What the Contract Actually Says.

Comments
6 min read
Agent payment standards are standardizing the cap, not the binding

Agent payment standards are standardizing the cap, not the binding

Comments 17
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.