DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

Comments
1 min read
My smart-contract scanner reports almost nothing — and that's the whole point

My smart-contract scanner reports almost nothing — and that's the whole point

Comments 3
3 min read
Word review artifacts need a CI boundary too

Word review artifacts need a CI boundary too

Comments
3 min read
How to Secure your WordPress Site: 5 Essential Best Practices for Beginners

How to Secure your WordPress Site: 5 Essential Best Practices for Beginners

Comments
1 min read
How I Configure Cloudflare for My Personal Website

How I Configure Cloudflare for My Personal Website

Comments
1 min read
Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation

Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation

Comments
4 min read
Whack.sh - Multi-egress URL Threat Scanner

Whack.sh - Multi-egress URL Threat Scanner

Comments
2 min read
HUQAN: The Deterministic Trust Layer That Tells AI Agents "Wait, I Decide First"

HUQAN: The Deterministic Trust Layer That Tells AI Agents "Wait, I Decide First"

1
Comments
5 min read
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Comments
7 min read
I scanned 54 public repos of AI-built apps. 1 in 5 had something worth fixing.

I scanned 54 public repos of AI-built apps. 1 in 5 had something worth fixing.

Comments
1 min read
The client code I will not paste into an AI tool

The client code I will not paste into an AI tool

Comments
5 min read
Adform Delivery Script Compromised: Wallet Addresses Replaced on Clipboard and Screen

Adform Delivery Script Compromised: Wallet Addresses Replaced on Clipboard and Screen

Comments
5 min read
XCSSET v40: From Xcode Supply Chain to Memory-Resident and Browser/Telegram Hijacking

XCSSET v40: From Xcode Supply Chain to Memory-Resident and Browser/Telegram Hijacking

Comments
6 min read
DeepSeek and Hermes: An Autonomous Attack Platform for Reconnaissance, PoC Acquisition, and Target Selection

DeepSeek and Hermes: An Autonomous Attack Platform for Reconnaissance, PoC Acquisition, and Target Selection

Comments
5 min read
Boundary Escape in Claude Evaluation Environment: Real-World Incidents at 3 Organizations and Malicious PyPI Package Publication

Boundary Escape in Claude Evaluation Environment: Real-World Incidents at 3 Organizations and Malicious PyPI Package Publication

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.