DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Terraform State Files: Your Entire Infrastructure Credential Inventory in One Plaintext File
rxkov profile
Rxkov

Terraform State Files: Your Entire Infrastructure Credential Inventory in One Plaintext File

#cloud #infrastructure #security #terraform
Comments
5 min read
AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions
rxkov profile
Rxkov

AI Agent Long-Term Memory Is an Unguarded Database: How Poisoning Attacks Survive Across Sessions

#ai #cybersecurity #llm #security
Comments
5 min read
VITE_ Is a Promotion Operator: How Build Pipelines Ship Server-Side Secrets to the Browser
rxkov profile
Rxkov

VITE_ Is a Promotion Operator: How Build Pipelines Ship Server-Side Secrets to the Browser

#frontend #javascript #security #webdev
Comments
5 min read
SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity
rxkov profile
Rxkov

SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity

#api #aws #cybersecurity #security
Comments
5 min read
CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover
rxkov profile
Rxkov

CVE-2024-55591: How an Auth Bypass Became an Internet-Scale Firewall Takeover

#cybersecurity #infosec #security
Comments
5 min read
GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls
rxkov profile
Rxkov

GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls

#api #cybersecurity #infosec #security
Comments
5 min read
Istio Permissive Mode: The mTLS Gap Nobody Talks About
rxkov profile
Rxkov

Istio Permissive Mode: The mTLS Gap Nobody Talks About

#kubernetes #networking #security
1
Comments
6 min read
Specification Gaming Is an Attack Surface, Not an Alignment Footnote
rxkov profile
Rxkov

Specification Gaming Is an Attack Surface, Not an Alignment Footnote

#agents #ai #llm #security
Comments
5 min read
Adding Humanbound's Firewall on Top of Your PyRIT Stack
sofaliferi profile

Adding Humanbound's Firewall on Top of Your PyRIT Stack

#ai #security #redteam #opensource
2
Comments
3 min read
JWT Vulnerabilities: Common Attacks and How to Prevent Them
rxkov profile
Rxkov

JWT Vulnerabilities: Common Attacks and How to Prevent Them

#security #jwt #auth #cve
Comments
6 min read
Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism
rxkov profile
Rxkov

Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism

#cybersecurity #infosec #security
Comments
6 min read
Secrets in Docker Images: What Public Container Registries Expose
rxkov profile
Rxkov

Secrets in Docker Images: What Public Container Registries Expose

#cybersecurity #devops #docker #security
Comments
6 min read
GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs
rxkov profile
Rxkov

GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs

#api #cybersecurity #infosec #security
Comments
6 min read
JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID
rxkov profile
Rxkov

JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID

#api #backend #cybersecurity #security
Comments
5 min read
System Prompt Confidentiality Is Security by Obscurity
rxkov profile
Rxkov

System Prompt Confidentiality Is Security by Obscurity

#ai #cybersecurity #llm #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.