DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Auditing an MCP Server Against the OWASP MCP Top 10

Auditing an MCP Server Against the OWASP MCP Top 10

1
Comments
5 min read
XML External Entities (XXE)

XML External Entities (XXE)

Comments
13 min read
ML-KEM Is Already In Your Browser. Here's How It Actually Works.

ML-KEM Is Already In Your Browser. Here's How It Actually Works.

Comments
1 min read
LID / Linux Is Dying

LID / Linux Is Dying

Comments
4 min read
Agent browser runs need receipts, not just screenshots

Agent browser runs need receipts, not just screenshots

Comments
1 min read
A zero-telemetry, gamified CAPTCHA for React

A zero-telemetry, gamified CAPTCHA for React

Comments 2
2 min read
I Built a Vision AI That Blocks Blockchain Attacks Invisible to Text-Based Systems — From Ouagadougou, Burkina Faso

I Built a Vision AI That Blocks Blockchain Attacks Invisible to Text-Based Systems — From Ouagadougou, Burkina Faso

Comments 2
6 min read
Symlink races and a client-controlled auth header in OpenClaw

Symlink races and a client-controlled auth header in OpenClaw

Comments
1 min read
North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

1
Comments
4 min read
How Hand-Forged Iron Latches Add Character and Strength to Any Door

How Hand-Forged Iron Latches Add Character and Strength to Any Door

10
Comments 5
1 min read
NeuroImprint Detector: Audita adapters PEFT para detectar backdoors de privacidad en Federated Learning

NeuroImprint Detector: Audita adapters PEFT para detectar backdoors de privacidad en Federated Learning

Comments 1
3 min read
How Samsung's 2026 Security Update Broke Download Mode (And How to Fix It)

How Samsung's 2026 Security Update Broke Download Mode (And How to Fix It)

Comments 1
3 min read
Managing TLS certificates and JWT keys is still a mess in 2026 — so I built a tool

Managing TLS certificates and JWT keys is still a mess in 2026 — so I built a tool

1
Comments
3 min read
I shipped 35 bugs in my AI chatbot. The scariest one was on the output side.

Treating model output as untrusted input

I shipped 35 bugs in my AI chatbot. The scariest one was on the output side.

13
Comments 19
5 min read
Your coding agent will route around your rules. Here's how to actually stop it.

Your coding agent will route around your rules. Here's how to actually stop it.

10
Comments 13
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.