DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems
rxkov profile
Rxkov

Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems

#agents #ai #cybersecurity #security
Comments
4 min read
Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive
rxkov profile
Rxkov

Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive

#agents #ai #cybersecurity #security
Comments
5 min read
Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer
rxkov profile
Rxkov

Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer

#agents #cybersecurity #llm #security
Comments
5 min read
System Prompt Confidentiality Is Security by Obscurity
rxkov profile
Rxkov

System Prompt Confidentiality Is Security by Obscurity

#ai #cybersecurity #llm #security
Comments
4 min read
JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID
rxkov profile
Rxkov

JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID

#api #backend #cybersecurity #security
Comments
5 min read
cast(bool, x) is a promise to the type checker. At runtime it is the identity function.
mahirhir profile

cast(bool, x) is a promise to the type checker. At runtime it is the identity function.

#python #typing #security #ai
6
Comments 9
3 min read
GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration
rxkov profile
Rxkov

GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration

#api #cybersecurity #infosec #security
Comments
6 min read
CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates
rxkov profile
Rxkov

CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates

#cybersecurity #infosec #security
Comments
5 min read
Subdomain Enumeration: Finding the Hidden Attack Surface
rxkov profile
Rxkov

Subdomain Enumeration: Finding the Hidden Attack Surface

#osint #recon #subdomain #security
Comments
6 min read
OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability
rxkov profile
Rxkov

OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

#authentication #cybersecurity #infosec #security
Comments
6 min read
CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet
rxkov profile
Rxkov

CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet

#cybersecurity #infosec #security
Comments
5 min read
XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB
rxkov profile
Rxkov

XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB

#api #cybersecurity #infosec #security
Comments
6 min read
DNS Security: How Attackers Exploit Your Domain Configuration
rxkov profile
Rxkov

DNS Security: How Attackers Exploit Your Domain Configuration

#osint #security
Comments
6 min read
The Sandbox That Exists Only in the System Prompt
rxkov profile
Rxkov

The Sandbox That Exists Only in the System Prompt

#agents #cybersecurity #llm #security
Comments
5 min read
Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected
rxkov profile
Rxkov

Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

#api #cybersecurity #infosec #security
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.