DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why traditional DAST misses your API vulnerabilities (and how to fix it in CI/CD)

Why traditional DAST misses your API vulnerabilities (and how to fix it in CI/CD)

2
Comments
8 min read
Day Zero: Introducing the Engineering Philosophy of the Cirious Foundation

Day Zero: Introducing the Engineering Philosophy of the Cirious Foundation

1
Comments
2 min read
We audited the same codebase twice. The score went down. The audit got better. Here is why.

We audited the same codebase twice. The score went down. The audit got better. Here is why.

Comments
3 min read
GitHub Just Retired Seven Org Security Fields — Your 'New Repo Hardening' Script Is Now A No-Op

GitHub Just Retired Seven Org Security Fields — Your 'New Repo Hardening' Script Is Now A No-Op

Comments
5 min read
the guardrails i actually use with ai agents

the guardrails i actually use with ai agents

1
Comments
7 min read
Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

2
Comments
10 min read
The Flipper Zero Features Nobody Tells You About (Until You Read the Source Code)

The Flipper Zero Features Nobody Tells You About (Until You Read the Source Code)

3
Comments
5 min read
The MCP Security Crisis: What We Found Hunting Vulnerabilities Across the Ecosystem

The MCP Security Crisis: What We Found Hunting Vulnerabilities Across the Ecosystem

1
Comments
9 min read
I replaced CAPTCHA with passive biometrics after AI hit 91% bypass rate — 7 biological signals, no puzzles, free tier

I replaced CAPTCHA with passive biometrics after AI hit 91% bypass rate — 7 biological signals, no puzzles, free tier

Comments
1 min read
Zero Trust Security - Why Companies Trust Nobody, Not Even You

Zero Trust Security - Why Companies Trust Nobody, Not Even You

Comments
4 min read
Why most call centres are PCI SAQ D when they don't have to be

Why most call centres are PCI SAQ D when they don't have to be

Comments
4 min read
Engineering an Agentic AI Copilot: Integrating LLMs with 48 FinTech Tools and Autonomous Execution Guardrails

Engineering an Agentic AI Copilot: Integrating LLMs with 48 FinTech Tools and Autonomous Execution Guardrails

Comments
4 min read
Avaliação de fornecedores com Agentes de IA: a estrutura que funciona numa auditoria ISO 27001

Avaliação de fornecedores com Agentes de IA: a estrutura que funciona numa auditoria ISO 27001

Comments
12 min read
I Changed One Number… and Got Access to Citizens’ ID and Address Proofs

I Changed One Number… and Got Access to Citizens’ ID and Address Proofs

Comments
2 min read
GitHub Actions linters compared - actionlint, ci-doctor, sherif, octoscan

GitHub Actions linters compared - actionlint, ci-doctor, sherif, octoscan

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.