DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Stop letting your AI guess: The case for deterministic Regex in MCP

Stop letting your AI guess: The case for deterministic Regex in MCP

1
Comments
4 min read
My checkout said it was ready for a month. Nobody could have paid.

My checkout said it was ready for a month. Nobody could have paid.

1
Comments
6 min read
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Comments
6 min read
Sole developer on a national SSO platform for six months, with Claude writing most of the code

Sole developer on a national SSO platform for six months, with Claude writing most of the code

Comments
5 min read
A Practical MCP Server Health Check: 6 Signals Before You Install

A Practical MCP Server Health Check: 6 Signals Before You Install

Comments
3 min read
True or false?

True or false?

1
Comments
4 min read
ArubaOS-CX CVE-2026-73749: Unauthenticated RCE via Input Processing Flaw in Daemon

ArubaOS-CX CVE-2026-73749: Unauthenticated RCE via Input Processing Flaw in Daemon

Comments 1
7 min read
Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

1
Comments
6 min read
How svgin-react renders SVGs as real, styleable elements without the XSS risk

How svgin-react renders SVGs as real, styleable elements without the XSS risk

Comments
6 min read
A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

1
Comments
5 min read
Linux Kernel CVEs: What to Patch by Device (26 Jul – 1 Aug 2026)

Linux Kernel CVEs: What to Patch by Device (26 Jul – 1 Aug 2026)

Comments
4 min read
SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

1
Comments
6 min read
Sessions vs JWTs: you are choosing how often you pay for state

Debates hidden state costs and revocation traps

Sessions vs JWTs: you are choosing how often you pay for state

29
Comments 9
8 min read
Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices

Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices

Comments
8 min read
CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.