DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Four permission checks to test before connecting an AI agent to real tools
onemorelock profile

Four permission checks to test before connecting an AI agent to real tools

#security #ai #testing #webdev
Comments
4 min read
How to keep Claude Code and Cursor from reading your .env
erik_nascimento_f32c73bc3 profile

How to keep Claude Code and Cursor from reading your .env

#security #ai #macos #productivity
Comments
3 min read
sshole (CVE-2026-123158): when '*' in /etc/shadow became a working password on musl
stanleya profile

sshole (CVE-2026-123158): when '*' in /etc/shadow became a working password on musl

#security #linux #devops #infosec
Comments
5 min read
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
dwayne_mcdaniel profile

The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now

#security #github #ai #secrets
Comments
8 min read
A rule that loads fine and never fires: what we measured on our own Wazuh rig
xuxu298 profile

A rule that loads fine and never fires: what we measured on our own Wazuh rig

#wazuh #siem #detectionengineering #security
Comments
5 min read
How a Malicious Bot Attack Forced Me to Rebuild My Webmaster Tools on Edge Computing
laing_lii_8c1214ffb0b60ec profile

How a Malicious Bot Attack Forced Me to Rebuild My Webmaster Tools on Edge Computing

#webdev #security #php
5
Comments 1
3 min read
Self-Managed GitLab and CVE-2026-97229: A Practical Patch and Hunt Checklist
affix_centersoftechserv profile

Self-Managed GitLab and CVE-2026-97229: A Practical Patch and Hunt Checklist

#security #gitlab #devops #cicd
Comments
2 min read
Receipt Audit Delivery: Private Object Storage, Presigned Downloads, Timed Deletion
valord33 profile

Receipt Audit Delivery: Private Object Storage, Presigned Downloads, Timed Deletion

#storage #security #backend
Comments
8 min read
Verdict Ledger v3.3: verify an AI agent's judgment history without receiving a single row
huv0310arch profile

Verdict Ledger v3.3: verify an AI agent's judgment history without receiving a single row

#security #opensource #python #ai
Comments
2 min read
Lambda SBOM: Which function ships which npm package?
sascha-ms profile

Lambda SBOM: Which function ships which npm package?

#aws #node #security #serverless
Comments
16 min read
3 Retention Gates for Storing User Files Across Alternative Storage Providers (Free Tier)
theodorhawkins9251 profile

3 Retention Gates for Storing User Files Across Alternative Storage Providers (Free Tier)

#storage #security #architecture
Comments
6 min read
Your audit covers a commit, not your launch
bloqarl profile

Your audit covers a commit, not your launch

#security #web3 #blockchain #solidity
Comments
5 min read
Rotate a leaked API key without stopping your services: dotvault hands out the new value first
uehara profile
uehara

Rotate a leaked API key without stopping your services: dotvault hands out the new value first

#dotvault #secrets #devops #security
Comments
18 min read
Login anomaly detection: why our 3 a.m. alarm was mostly wrong
systemdesignsimple profile

Login anomaly detection: why our 3 a.m. alarm was mostly wrong

#security #systemdesign #authentication #monitoring
Comments
8 min read
Android Developer Verification for Apps Outside Google Play
vmzavas profile

Android Developer Verification for Apps Outside Google Play

#android #google #mobile #security
1
Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.