DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
40-Year-Old Bug. Claude Found It Before the Author Did.

40-Year-Old Bug. Claude Found It Before the Author Did.

Comments
5 min read
The AI Agent Destroyed Its Mail Server to Keep a Secret

The AI Agent Destroyed Its Mail Server to Keep a Secret

Comments
5 min read
Your file-sharing server shouldn't be able to read your files. Here's how I made sure mine can't.

Your file-sharing server shouldn't be able to read your files. Here's how I made sure mine can't.

1
Comments 2
3 min read
Evals Are Alignment Enforcement: Why Your Safety Strategy Needs Runtime Checks

Evals Are Alignment Enforcement: Why Your Safety Strategy Needs Runtime Checks

1
Comments
5 min read
Detecting paying Cloudflare customers (for fun and profit)

Detecting paying Cloudflare customers (for fun and profit)

Comments
11 min read
🔒 Stop Exposing Emails, Phones & Cards in Logs — Meet `validata-py`

🔒 Stop Exposing Emails, Phones & Cards in Logs — Meet `validata-py`

3
Comments
2 min read
Hermes Agent's skill trust model is a four-repo allowlist

Hermes Agent's skill trust model is a four-repo allowlist

Comments 1
5 min read
I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

Comments
7 min read
How a Coding Agent Deleted a Production Database in 9 Seconds

How a Coding Agent Deleted a Production Database in 9 Seconds

Comments
11 min read
Understanding Bastion Hosts: The Quite Gatekeepers of Modern Infrastructure

Understanding Bastion Hosts: The Quite Gatekeepers of Modern Infrastructure

Comments
5 min read
Del DDoS que tiraba exchanges al DDoS que silencia oráculos: cómo Lazarus se llevó $292M de KelpDAO en abril 2026

Del DDoS que tiraba exchanges al DDoS que silencia oráculos: cómo Lazarus se llevó $292M de KelpDAO en abril 2026

Comments
9 min read
MFA is Not the Holy Grail of Security

MFA is Not the Holy Grail of Security

Comments
7 min read
OpenAI Built a Lockdown Mode Because Tool-Based Data Exfiltration Is Real — Here's What Catches It Earlier

OpenAI Built a Lockdown Mode Because Tool-Based Data Exfiltration Is Real — Here's What Catches It Earlier

1
Comments
5 min read
Meta's Rogue AI Agent Was Always Going to Happen. Here's the Fix.

Meta's Rogue AI Agent Was Always Going to Happen. Here's the Fix.

Comments
3 min read
Stopping AI agent tool calls with deny-by-default — server-side scope gate and CEO approval

Stopping AI agent tool calls with deny-by-default — server-side scope gate and CEO approval

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.