DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

1
Comments
5 min read
I Trained a Vulnerability Detection Model. It Was Reading Comments, Not Code.

I Trained a Vulnerability Detection Model. It Was Reading Comments, Not Code.

Comments
3 min read
I Threw the Box Away. The Damage Was Already Done.

I Threw the Box Away. The Damage Was Already Done.

Comments 1
3 min read
Stop letting your AI guess: The case for deterministic Regex in MCP

Stop letting your AI guess: The case for deterministic Regex in MCP

1
Comments
4 min read
My checkout said it was ready for a month. Nobody could have paid.

My checkout said it was ready for a month. Nobody could have paid.

1
Comments
6 min read
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Comments
6 min read
Sole developer on a national SSO platform for six months, with Claude writing most of the code

Sole developer on a national SSO platform for six months, with Claude writing most of the code

Comments
5 min read
True or false?

True or false?

1
Comments
4 min read
A Practical MCP Server Health Check: 6 Signals Before You Install

A Practical MCP Server Health Check: 6 Signals Before You Install

Comments
3 min read
Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

1
Comments
6 min read
ArubaOS-CX CVE-2026-73749: Unauthenticated RCE via Input Processing Flaw in Daemon

ArubaOS-CX CVE-2026-73749: Unauthenticated RCE via Input Processing Flaw in Daemon

Comments 1
7 min read
A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

1
Comments
5 min read
How svgin-react renders SVGs as real, styleable elements without the XSS risk

How svgin-react renders SVGs as real, styleable elements without the XSS risk

Comments
6 min read
Linux Kernel CVEs: What to Patch by Device (26 Jul – 1 Aug 2026)

Linux Kernel CVEs: What to Patch by Device (26 Jul – 1 Aug 2026)

Comments
4 min read
SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.