DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What to check before installing a Confluence app
mikhailklimenko profile

What to check before installing a Confluence app

#confluence #atlassian #security #devops
Comments 1
4 min read
Reprint-Safe Payment Tokens: Keyed HMAC-SHA256 with a Luhn Check Digit
amc_animarcelinus_b4a718 profile

Reprint-Safe Payment Tokens: Keyed HMAC-SHA256 with a Luhn Check Digit

#security #fintech #architecture #cryptography
1
Comments
5 min read
Why I Built a Real SOC in My Basement
bryant_at_bxbtech profile
Bryant

Why I Built a Real SOC in My Basement

#cybersecurity #monitoring #security
Comments
5 min read
It Printed "Verifying." It Verified Nothing.
yeriahz profile

It Printed "Verifying." It Verified Nothing.

#ai #security #devops #testing
1
Comments
6 min read
CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion
su5hrut profile

CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion

#security #python #vulnerability #ssrf
2
Comments 5
5 min read
Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited
rxkov profile
Rxkov

Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited

#aws #cloud #cybersecurity #security
Comments
6 min read
AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions
rxkov profile
Rxkov

AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

#ai #cybersecurity #llm #security
Comments
5 min read
Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing
rxkov profile
Rxkov

Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

#api #authentication #cybersecurity #security
Comments
5 min read
Terraform State Files: Your Entire Infrastructure Credential Inventory in One Plaintext File
rxkov profile
Rxkov

Terraform State Files: Your Entire Infrastructure Credential Inventory in One Plaintext File

#cloud #infrastructure #security #terraform
Comments
5 min read
VITE_ Is a Promotion Operator: How Build Pipelines Ship Server-Side Secrets to the Browser
rxkov profile
Rxkov

VITE_ Is a Promotion Operator: How Build Pipelines Ship Server-Side Secrets to the Browser

#frontend #javascript #security #webdev
Comments
5 min read
SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity
rxkov profile
Rxkov

SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity

#api #aws #cybersecurity #security
Comments
5 min read
CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover
rxkov profile
Rxkov

CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover

#cybersecurity #infosec #security
Comments
5 min read
GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls
rxkov profile
Rxkov

GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls

#api #cybersecurity #infosec #security
Comments
5 min read
API Token in Query Parameter: Six Places the Credential Persists Without You Knowing
rxkov profile
Rxkov

API Token in Query Parameter: Six Places the Credential Persists Without You Knowing

#api #backend #cybersecurity #security
Comments
5 min read
Istio Permissive Mode: The mTLS Gap Nobody Talks About
rxkov profile
Rxkov

Istio Permissive Mode: The mTLS Gap Nobody Talks About

#kubernetes #networking #security
1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.