DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Inside an OT DMZ: Why a Firewall Alone Is Not Enough

Inside an OT DMZ: Why a Firewall Alone Is Not Enough

Comments
7 min read
reCAPTCHA: It’s Not Just “I’m Not a Robot”

reCAPTCHA: It’s Not Just “I’m Not a Robot”

Comments
9 min read
DeviceCheck and App Attest: Stopping Fraud in iOS Apps

DeviceCheck and App Attest: Stopping Fraud in iOS Apps

6
Comments
7 min read
The Postman Variable Mistake That Leaks Tokens (and the 5-Scope Model That Prevents It)

The Postman Variable Mistake That Leaks Tokens (and the 5-Scope Model That Prevents It)

Comments
3 min read
Authentication Audit Trails: Correlating Risk Events with Session Lifecycle Actions

Authentication Audit Trails: Correlating Risk Events with Session Lifecycle Actions

Comments
7 min read
From community review to a shipped security hardening with Codex

From community review to a shipped security hardening with Codex

1
Comments
3 min read
Manually Proving and Documenting an IDOR (CWE-639) — A Full Walkthrough

Manually Proving and Documenting an IDOR (CWE-639) — A Full Walkthrough

Comments
2 min read
I Built a Leak Detector for API Keys. My Synthetic Tests Caught 8 Out of 20

I Built a Leak Detector for API Keys. My Synthetic Tests Caught 8 Out of 20

Comments
2 min read
sbx: a disposable Docker sandbox for opening untrusted repos in your own IDE

sbx: a disposable Docker sandbox for opening untrusted repos in your own IDE

1
Comments
2 min read
What does "verified" actually mean in your stack?

What does "verified" actually mean in your stack?

Comments
1 min read
qm Gives Every Employee Their Own Agent Sandbox Instead of One Shared Brain

qm Gives Every Employee Their Own Agent Sandbox Instead of One Shared Brain

Comments
4 min read
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

Comments
5 min read
Guida completa OWASP Top 10

Guida completa OWASP Top 10

Comments
5 min read
The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

Comments
8 min read
CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.