DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Built a Free Browser-Only JWT Secret & Key Pair Generator (HMAC + RSA + Ed25519)
rajesh_kumarkanumetta_b5 profile

I Built a Free Browser-Only JWT Secret & Key Pair Generator (HMAC + RSA + Ed25519)

#javascript #security #webdev #jwt
Comments
3 min read
Cracking WMI-exec in Rust by turning impacket into a byte-level oracle
pumadracon profile
Puma

Cracking WMI-exec in Rust by turning impacket into a byte-level oracle

#showdev #rust #security #microsoft
Comments
1 min read
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Your AI agent's guardrails don't know what it's allowed to do
pqbuilder profile
German

Your AI agent's guardrails don't know what it's allowed to do

#security #webdev #ai #agents
Comments
5 min read
Agent Identity Spoofing in Multi-Agent Systems: Your Orchestrator Has No Idea Who It Is Talking To
rxkov profile
Rxkov

Agent Identity Spoofing in Multi-Agent Systems: Your Orchestrator Has No Idea Who It Is Talking To

#agents #architecture #cybersecurity #security
Comments 1
5 min read
Killing the long-lived tokens in my CI, one exchange at a time
earnestamateur profile

Killing the long-lived tokens in my CI, one exchange at a time

#cicd #devops #github #security
Comments
7 min read
The eight login forms I deleted
captkay profile

The eight login forms I deleted

#security #selfhosted #homelab #sso
Comments
3 min read
Cloud Misconfiguration: S3 Buckets, Firebase, and Azure Blobs
rxkov profile
Rxkov

Cloud Misconfiguration: S3 Buckets, Firebase, and Azure Blobs

#osint #security
1
Comments 1
5 min read
The quantum problem starts before the quantum computer arrives
vvitovec profile

The quantum problem starts before the quantum computer arrives

#pqc #security #cryptography #quantumcomputing
Comments
4 min read
PQC migration does not start by replacing an algorithm
vvitovec profile

PQC migration does not start by replacing an algorithm

#pqc #security #cryptography #pqcradar
Comments
5 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
rxkov profile
Rxkov

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials
rxkov profile
Rxkov

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

#api #cybersecurity #infosec #security
Comments
6 min read
API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin
rxkov profile
Rxkov

API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin

#api #architecture #cybersecurity #security
Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately
rxkov profile
Rxkov

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

#api #backend #cybersecurity #security
Comments
6 min read
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access
rxkov profile
Rxkov

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

#backend #cybersecurity #devops #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.