DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why CIDS Looks at Behavior, Not Just Individual Requests
cybermoranda profile

Why CIDS Looks at Behavior, Not Just Individual Requests

#cybersecurity #infosec #security
Comments
3 min read
CSRF - Cross-Site Request Forgery
luciencorreia profile

CSRF - Cross-Site Request Forgery

#laravel #php #security #webdev
Comments
5 min read
Attack Surface of Hand-Rolled Auth: Consolidating Keycloak FastAPI Role Based Access Control Across 40 Endpoints
gaberialsofie profile

Attack Surface of Hand-Rolled Auth: Consolidating Keycloak FastAPI Role Based Access Control Across 40 Endpoints

#api #backend #cybersecurity #security
Comments
7 min read
Liveness detection basics: stopping a photo from unlocking a face check
pranjulrathour profile

Liveness detection basics: stopping a photo from unlocking a face check

#liveness #antispoofing #facerecognition #security
Comments
3 min read
We scanned our own production site and found 8 vulnerabilities. Here’s the list.
codecrack01 profile

We scanned our own production site and found 8 vulnerabilities. Here’s the list.

#webdev #security #devops #buildinpublic
2
Comments 2
3 min read
MCP Tool Descriptions Are Instructions, Not Metadata -- and That Is the Exploit
rxkov profile
Rxkov

MCP Tool Descriptions Are Instructions, Not Metadata -- and That Is the Exploit

#ai #llm #mcp #security
1
Comments 3
5 min read
Origin Part 22: A Smaller Circuit
jtil4201 profile
Josh T

Origin Part 22: A Smaller Circuit

#security #ai #machinelearning
Comments
7 min read
I Found 3 Security Vulnerabilities in My Own AI Agent's Tool Access

AI security fails and bypass lessons
dannwaneri profile

I Found 3 Security Vulnerabilities in My Own AI Agent's Tool Access

#ai #opensource #security #webmcp
19
Comments 21
3 min read
OPSEC for Agents: Scope, Caps, Monitoring, and Kill Switches
rxkov profile
Rxkov

OPSEC for Agents: Scope, Caps, Monitoring, and Kill Switches

#agentic #llm #opsec #security
Comments 1
4 min read
ReDoS via API Input Validation: How a Single Request Stalls the Event Loop
rxkov profile
Rxkov

ReDoS via API Input Validation: How a Single Request Stalls the Event Loop

#backend #javascript #node #security
Comments 1
5 min read
DDoS Protection & Rate Limiting Abuse Cases
gouranga-das-khulna profile

DDoS Protection & Rate Limiting Abuse Cases

#security #systemdesign #backend #webdev
Comments 2
2 min read
Auth0 Token Vault: Letting an Autonomous Agent Call Slack and Google APIs Without Ever Holding the User's Credentials
mukesh_13 profile
Mukesh

Auth0 Token Vault: Letting an Autonomous Agent Call Slack and Google APIs Without Ever Holding the User's Credentials

#auth0 #oauth #aiagents #security
Comments
5 min read
The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI
rxkov profile
Rxkov

The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI

#agents #cybersecurity #llm #security
Comments 2
5 min read
Everyone agrees on the risk. They disagree on the price.
lvlrsajjad profile
Sadjad

Everyone agrees on the risk. They disagree on the price.

#security #cryptography #postquantum #compliance
Comments
7 min read
LLM Agent Sandboxes Have Two Escape Surfaces. Only One Gets CVEs.
rxkov profile
Rxkov

LLM Agent Sandboxes Have Two Escape Surfaces. Only One Gets CVEs.

#agents #llm #mcp #security
Comments 2
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.