DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
We Audited Our Own Server with Claude Mythos 5.1

We Audited Our Own Server with Claude Mythos 5.1

Comments
13 min read
Self-Hosting Behind a Cloudflare Tunnel: Exposing Services Without Opening Inbound Ports

Self-Hosting Behind a Cloudflare Tunnel: Exposing Services Without Opening Inbound Ports

Comments
7 min read
CSP, Trusted Types & Residual XSS: Reading Reports Like a Forensics Log

CSP, Trusted Types & Residual XSS: Reading Reports Like a Forensics Log

Comments 1
8 min read
Every read route called the public-API check except one: unauthenticated locale lookup in ApostropheCMS (CVE-2026-113668)

Every read route called the public-API check except one: unauthenticated locale lookup in ApostropheCMS (CVE-2026-113668)

Comments
5 min read
Ankr Bridge Exploit: Forged Receipts Drained $304K

Ankr Bridge Exploit: Forged Receipts Drained $304K

Comments
6 min read
What If You Could Test a Software Product Without Access to Its Source Code?

What If You Could Test a Software Product Without Access to Its Source Code?

7
Comments 1
2 min read
Five Myths About Sharing One AI Workbench: A Data-Flow Ledger for Teams

Five Myths About Sharing One AI Workbench: A Data-Flow Ledger for Teams

Comments
4 min read
API Rate Limiting: How to Test It and How to Design It

API Rate Limiting: How to Test It and How to Design It

Comments
7 min read
How to Build an Isolated Malware Analysis Lab

How to Build an Isolated Malware Analysis Lab

Comments
11 min read
An Auto-Updater That Doesn't Trust Its Download Server: minisign, Verify-Before-Parse and Rollback Protection

An Auto-Updater That Doesn't Trust Its Download Server: minisign, Verify-Before-Parse and Rollback Protection

Comments
8 min read
Realtime Publish Acknowledgements — Security Controls for Customer Support Chat

Realtime Publish Acknowledgements — Security Controls for Customer Support Chat

Comments
7 min read
When false Disappears: A Serialization Bug in Agent Capability Declarations

When false Disappears: A Serialization Bug in Agent Capability Declarations

1
Comments
5 min read
How on-device invisible marking and share records work, at a high level

How on-device invisible marking and share records work, at a high level

Comments
4 min read
Ping64|How Bluetooth Pairing Keeps Your Devices Connected and Where Its Security Stops

Ping64|How Bluetooth Pairing Keeps Your Devices Connected and Where Its Security Stops

Comments
4 min read
Smart Home i praksis: Når software møder elinstallationer

Smart Home i praksis: Når software møder elinstallationer

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.