DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Your AI agent's guardrails don't know what it's allowed to do
pqbuilder profile
German

Your AI agent's guardrails don't know what it's allowed to do

#security #webdev #ai #agents
Comments
5 min read
Agent Identity Spoofing in Multi-Agent Systems: Your Orchestrator Has No Idea Who It Is Talking To
rxkov profile
Rxkov

Agent Identity Spoofing in Multi-Agent Systems: Your Orchestrator Has No Idea Who It Is Talking To

#agents #architecture #cybersecurity #security
Comments 1
5 min read
Killing the long-lived tokens in my CI, one exchange at a time
earnestamateur profile

Killing the long-lived tokens in my CI, one exchange at a time

#cicd #devops #github #security
Comments
7 min read
Cloud Misconfiguration: S3 Buckets, Firebase, and Azure Blobs
rxkov profile
Rxkov

Cloud Misconfiguration: S3 Buckets, Firebase, and Azure Blobs

#osint #security
1
Comments 1
5 min read
The eight login forms I deleted
captkay profile

The eight login forms I deleted

#security #selfhosted #homelab #sso
Comments
3 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
rxkov profile
Rxkov

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
The quantum problem starts before the quantum computer arrives
vvitovec profile

The quantum problem starts before the quantum computer arrives

#pqc #security #cryptography #quantumcomputing
Comments
4 min read
PQC migration does not start by replacing an algorithm
vvitovec profile

PQC migration does not start by replacing an algorithm

#pqc #security #cryptography #pqcradar
Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately
rxkov profile
Rxkov

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

#api #backend #cybersecurity #security
Comments
6 min read
API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin
rxkov profile
Rxkov

API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin

#api #architecture #cybersecurity #security
Comments
5 min read
Magento 2 API Rate Limiting: Protecting Your Store from Abuse
magevanta profile

Magento 2 API Rate Limiting: Protecting Your Store from Abuse

#magento #security #performance
Comments
6 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint
rxkov profile
Rxkov

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

#api #backend #cybersecurity #security
Comments
5 min read
HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways
rxkov profile
Rxkov

HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways

#api #cybersecurity #networking #security
Comments
5 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model
rxkov profile
Rxkov

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

#api #authentication #backend #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.