DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
NetScaler CVE-2026-19490: Attack Attempts Matching Authentication Bypass PoC Observed

NetScaler CVE-2026-19490: Attack Attempts Matching Authentication Bypass PoC Observed

1
Comments
5 min read
ShrekOS in two diagrams: giving an agent exactly one folder and one hostname

ShrekOS in two diagrams: giving an agent exactly one folder and one hostname

Comments
3 min read
I Built a Browser That Passes CreepJS — Here's What Still Catches Me

I Built a Browser That Passes CreepJS — Here's What Still Catches Me

Comments
5 min read
Your AI Isn’t Sovereign If It Can’t Leave

Your AI Isn’t Sovereign If It Can’t Leave

Comments 1
5 min read
What it took to ship a production remote MCP server with OAuth 2.1

What it took to ship a production remote MCP server with OAuth 2.1

Comments 2
2 min read
Every dev tool you paste your data into is a potential breach you didn't sign up for

Every dev tool you paste your data into is a potential breach you didn't sign up for

6
Comments 1
2 min read
Your MCP Server Is a Backdoor. Here's How Attackers Use It.

Your MCP Server Is a Backdoor. Here's How Attackers Use It.

1
Comments
2 min read
How I Built 172 Guards After My AI Agent Tried to Delete Production Data

How I Built 172 Guards After My AI Agent Tried to Delete Production Data

Comments 3
7 min read
The Agent Safety Gap Nobody Budgets For

The Agent Safety Gap Nobody Budgets For

Comments
3 min read
Is My Domain Blacklisted? Why a Public DNSBL Check Can Show a False Positive

Is My Domain Blacklisted? Why a Public DNSBL Check Can Show a False Positive

2
Comments
5 min read
I Trained a Vulnerability Detection Model. It Was Reading Comments, Not Code.

I Trained a Vulnerability Detection Model. It Was Reading Comments, Not Code.

Comments
3 min read
How a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked Correct

How a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked Correct

Comments
1 min read
A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

1
Comments
5 min read
How to Scrape and Parse CVE Data from NVD API v2

How to Scrape and Parse CVE Data from NVD API v2

Comments
5 min read
I Threw the Box Away. The Damage Was Already Done.

I Threw the Box Away. The Damage Was Already Done.

Comments 1
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.