DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Dependency Confusion: When the Public Registry Overwrites Your Private Package
rxkov profile
Rxkov

Dependency Confusion: When the Public Registry Overwrites Your Private Package

#cybersecurity #security #software
Comments
6 min read
JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent
rxkov profile
Rxkov

JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

#api #authentication #cybersecurity #security
Comments
5 min read
GitHub Actions: When the CI/CD Pipeline Becomes a Secrets Exfiltration Vector
rxkov profile
Rxkov

GitHub Actions: When the CI/CD Pipeline Becomes a Secrets Exfiltration Vector

#cicd #cybersecurity #github #security
Comments
6 min read
CyberMoranda CIDS: Building a Security System That Thinks Before It Acts
cybermoranda profile

CyberMoranda CIDS: Building a Security System That Thinks Before It Acts

#architecture #cybersecurity #security #software
2
Comments 6
2 min read
CRLF Injection in API Responses: When User Input Reaches HTTP Headers
rxkov profile
Rxkov

CRLF Injection in API Responses: When User Input Reaches HTTP Headers

#api #backend #cybersecurity #security
Comments
5 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
rxkov profile
Rxkov

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page
rxkov profile
Rxkov

Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page

#authentication #cybersecurity #infosec #security
Comments
5 min read
Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting
rxkov profile
Rxkov

Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting

#api #backend #cybersecurity #security
Comments
6 min read
Framework Binding Gap: How the ORM Accepts Fields You Never Documented
rxkov profile
Rxkov

Framework Binding Gap: How the ORM Accepts Fields You Never Documented

#backend #cybersecurity #database #security
Comments
6 min read
GitHub Recon: How Public Repositories Expose Infrastructure, Credentials, and Identity
rxkov profile
Rxkov

GitHub Recon: How Public Repositories Expose Infrastructure, Credentials, and Identity

#cybersecurity #git #github #security
Comments
5 min read
LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope
rxkov profile
Rxkov

LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope

#api #authentication #cybersecurity #security
Comments
5 min read
API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/
rxkov profile
Rxkov

API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/

#api #backend #cybersecurity #security
Comments
5 min read
OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store
rxkov profile
Rxkov

OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store

#ai #cybersecurity #llm #security
Comments
4 min read
Mass Assignment in REST APIs: When the Framework Binds More Than It Should
rxkov profile
Rxkov

Mass Assignment in REST APIs: When the Framework Binds More Than It Should

#api #backend #security
Comments
5 min read
API Tokens in CI/CD Pipelines: Five Exposure Surfaces That Rotation Does Not Close
rxkov profile
Rxkov

API Tokens in CI/CD Pipelines: Five Exposure Surfaces That Rotation Does Not Close

#api #cicd #devops #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.