DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Should You Sign Out of OpenAI? The Hugging Face Breach Explained

Should You Sign Out of OpenAI? The Hugging Face Breach Explained

Comments
7 min read
The AI Summary Said "It's Not a Scam." The Springboard Was Your Site's Search Box

The AI Summary Said "It's Not a Scam." The Springboard Was Your Site's Search Box

Comments
6 min read
Mastering Keycloak: Essential Concepts Every Developer Should Know for Application Security

Mastering Keycloak: Essential Concepts Every Developer Should Know for Application Security

Comments
5 min read
JWT + OAuth2 + OIDC + PKCE Complete small Guide

JWT + OAuth2 + OIDC + PKCE Complete small Guide

2
Comments
5 min read
🔐 7 JWT Authentication Mistakes I Keep Seeing in Production

🔐 7 JWT Authentication Mistakes I Keep Seeing in Production

Comments 1
3 min read
Health Data Consent: 3 Rules for Category Checks, Grants, and Revocation (In Migration)

Health Data Consent: 3 Rules for Category Checks, Grants, and Revocation (In Migration)

1
Comments 1
6 min read
I Told the AI "A Scanner Flagged This" — and It Agreed With Everything

Frontier models fall hard for confirmation bias

I Told the AI "A Scanner Flagged This" — and It Agreed With Everything

19
Comments 25
10 min read
I Tried to Prompt-Inject My Own Agent Engine. It Didn't Work. Here's Why.

Structural gates beat prompt safety

I Tried to Prompt-Inject My Own Agent Engine. It Didn't Work. Here's Why.

41
Comments 11
12 min read
The Security Audit That Found 4 Issues in One Weekend

The Security Audit That Found 4 Issues in One Weekend

1
Comments
4 min read
What I scan for in Framer code components

What I scan for in Framer code components

Comments
5 min read
BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

Comments
2 min read
Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Comments
8 min read
Local-First Is a Data Boundary, Not a Safety Guarantee

Local-First Is a Data Boundary, Not a Safety Guarantee

Comments 1
3 min read
How I Used an Uncensored Local LLM for Adversarial QA on My macOS App

How I Used an Uncensored Local LLM for Adversarial QA on My macOS App

3
Comments 2
5 min read
The compliance frameworks were written before AI coding tools existed

The compliance frameworks were written before AI coding tools existed

Comments 2
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.