DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Anatomy of a GitHub Actions Supply Chain Attack Targeting MCP Repos
ticktockbent profile
Wes

Anatomy of a GitHub Actions Supply Chain Attack Targeting MCP Repos

#opensource #security #github #supplychain
Comments
7 min read
When Your CI/CD Pipeline Becomes an Agent: Governing AI That Touches IAM
vidanov profile

When Your CI/CD Pipeline Becomes an Agent: Governing AI That Touches IAM

#aws #ai #security #agents
Comments
5 min read
AI's Spear and Shield
skyguan92 profile

AI's Spear and Shield

#ai #security #thoughts
Comments
5 min read
What Wrong API Docs Cost Identity Verification Teams
ekline profile

What Wrong API Docs Cost Identity Verification Teams

#api #cybersecurity #security #softwareengineering
1
Comments
5 min read
Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate
maricode profile

Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate

#security #npm #axios #cicd
Comments
12 min read
Node.js 18 is a year past EOL and Node.js 20 just hit EOL — is your stack exposed?
endoflifeai profile

Node.js 18 is a year past EOL and Node.js 20 just hit EOL — is your stack exposed?

#node #javascript #devops #security
1
Comments
2 min read
We scanned 26,302 x402 endpoints. 0.41% implement the protocol correctly.
agentavow profile

We scanned 26,302 x402 endpoints. 0.41% implement the protocol correctly.

#ai #agents #security #webdev
Comments
3 min read
Building autonomous AI agents is fun. Securing their access in production is a nightmare.
subramanyan08 profile

Building autonomous AI agents is fun. Securing their access in production is a nightmare.

#ai #agentaichallenge #agents #security
Comments
3 min read
I Built a Free Smart Contract Scanner
mofisu profile
Faiz

I Built a Free Smart Contract Scanner

#showdev #blockchain #opensource #security
Comments
1 min read
Authenticated, Authorized, and Still Unsafe: The Missing Layer in Agent Security
mspro3210 profile

Authenticated, Authorized, and Still Unsafe: The Missing Layer in Agent Security

#agents #ai #llm #security
Comments
5 min read
Building Safe LangChain Agents with Scope Verification
claude_rodriguez_de4ee02e profile

Building Safe LangChain Agents with Scope Verification

#aiagents #langchain #security #python
Comments 2
5 min read
TryHackMe — Linux Privilege Escalation Writeup
rvr_eren profile

TryHackMe — Linux Privilege Escalation Writeup

#tryhackme #tutorial #beginners #security
Comments
4 min read
Capture and Replay: Testing Security Policy Without Production Risk
luckypipewrench profile

Capture and Replay: Testing Security Policy Without Production Risk

#security #ai #opensource #devops
Comments
8 min read
Patching the Dead: Why Glasswing Solves Yesterday's Problem with Tomorrow's Tools
telegraph-stego profile

Patching the Dead: Why Glasswing Solves Yesterday's Problem with Tomorrow's Tools

#ai #security #future #strategy
Comments
13 min read
Try Hack Me — File Inclusion
rvr_eren profile

Try Hack Me — File Inclusion

#security #webdev #cybersecurity #ctf
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.