DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle
rxkov profile
Rxkov

Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle

#api #backend #cybersecurity #security
Comments
5 min read
Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production
rxkov profile
Rxkov

Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production

#cybersecurity #devops #security
Comments 1
5 min read
AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control
rxkov profile
Rxkov

AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control

#agents #ai #cybersecurity #security
Comments 1
5 min read
Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents
rxkov profile
Rxkov

Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents

#agents #ai #cybersecurity #security
Comments 1
5 min read
AI Coding Agents Are Credential Extractors by Design
rxkov profile
Rxkov

AI Coding Agents Are Credential Extractors by Design

#agents #ai #cybersecurity #security
Comments 1
5 min read
Email Header Analysis: What SMTP Metadata Reveals About Infrastructure and Identity
rxkov profile
Rxkov

Email Header Analysis: What SMTP Metadata Reveals About Infrastructure and Identity

#cybersecurity #infrastructure #networking #security
Comments 1
6 min read
13 findings no Juice Shop. Nenhuma virou issue.
tiagovilasboas profile

13 findings no Juice Shop. Nenhuma virou issue.

#security #opensource #webdev #braziliandevs
2
Comments
5 min read
What to check before installing a Confluence app
mikhailklimenko profile

What to check before installing a Confluence app

#confluence #atlassian #security #devops
Comments 1
4 min read
Reprint-Safe Payment Tokens: Keyed HMAC-SHA256 with a Luhn Check Digit
amc_animarcelinus_b4a718 profile

Reprint-Safe Payment Tokens: Keyed HMAC-SHA256 with a Luhn Check Digit

#security #fintech #architecture #cryptography
1
Comments
5 min read
Why I Built a Real SOC in My Basement
bryant_at_bxbtech profile
Bryant

Why I Built a Real SOC in My Basement

#cybersecurity #monitoring #security
Comments
5 min read
It Printed "Verifying." It Verified Nothing.
yeriahz profile

It Printed "Verifying." It Verified Nothing.

#ai #security #devops #testing
1
Comments
6 min read
CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion
su5hrut profile

CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion

#security #python #vulnerability #ssrf
2
Comments 5
5 min read
Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited
rxkov profile
Rxkov

Exposed Buckets: How S3, GCS, and Azure Blob Are Passively Discovered and Exploited

#aws #cloud #cybersecurity #security
Comments
6 min read
GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls
rxkov profile
Rxkov

GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls

#api #cybersecurity #infosec #security
Comments
5 min read
AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions
rxkov profile
Rxkov

AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

#ai #cybersecurity #llm #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.