DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB
rxkov profile
Rxkov

XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB

#api #cybersecurity #infosec #security
Comments
6 min read
CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates
rxkov profile
Rxkov

CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates

#cybersecurity #infosec #security
Comments
5 min read
Subdomain Enumeration: Finding the Hidden Attack Surface
rxkov profile
Rxkov

Subdomain Enumeration: Finding the Hidden Attack Surface

#osint #recon #subdomain #security
Comments
6 min read
Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected
rxkov profile
Rxkov

Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

#api #cybersecurity #infosec #security
Comments
6 min read
DNS Security: How Attackers Exploit Your Domain Configuration
rxkov profile
Rxkov

DNS Security: How Attackers Exploit Your Domain Configuration

#osint #security
Comments
6 min read
CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet
rxkov profile
Rxkov

CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet

#cybersecurity #infosec #security
Comments
5 min read
The Sandbox That Exists Only in the System Prompt
rxkov profile
Rxkov

The Sandbox That Exists Only in the System Prompt

#agents #cybersecurity #llm #security
Comments
5 min read
LLM Denial-of-Wallet: Token Billing Is an Adversarial Primitive
rxkov profile
Rxkov

LLM Denial-of-Wallet: Token Billing Is an Adversarial Primitive

#ai #cybersecurity #llm #security
Comments
4 min read
In Multi-Agent Systems, the Weakest Subagent Sets the Privilege Ceiling
rxkov profile
Rxkov

In Multi-Agent Systems, the Weakest Subagent Sets the Privilege Ceiling

#agents #architecture #cybersecurity #security
Comments
4 min read
Hooks: Intercepting Tool Calls Before the Damage Happens
rxkov profile
Rxkov

Hooks: Intercepting Tool Calls Before the Damage Happens

#agentic #llm #hooks #security
Comments
4 min read
The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows
rxkov profile
Rxkov

The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows

#agents #ai #cybersecurity #security
Comments
5 min read
Blind SSRF: When the Response Is Empty and DNS Is the Only Channel
rxkov profile
Rxkov

Blind SSRF: When the Response Is Empty and DNS Is the Only Channel

#cybersecurity #infosec #security
Comments
6 min read
Visual Prompt Injection: How Images and PDFs Hijack AI Agents
rxkov profile
Rxkov

Visual Prompt Injection: How Images and PDFs Hijack AI Agents

#ai #cybersecurity #llm #security
Comments
5 min read
Context Window Flooding: How Attackers Weaponize the Lost-in-the-Middle Attention Gap
rxkov profile
Rxkov

Context Window Flooding: How Attackers Weaponize the Lost-in-the-Middle Attention Gap

#ai #cybersecurity #llm #security
Comments
5 min read
LLM Training Data Extraction: Production Models Are Access-Control-Free Archives
rxkov profile
Rxkov

LLM Training Data Extraction: Production Models Are Access-Control-Free Archives

#ai #llm #machinelearning #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.