DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Moving SSH Clients to macOS? Test SFTP After Reconnecting

Moving SSH Clients to macOS? Test SFTP After Reconnecting

Comments
2 min read
Reachability analysis: why most of your dependency CVEs don't matter

Reachability analysis: why most of your dependency CVEs don't matter

Comments
4 min read
Prompt Injection Defense in Production LLMs: Building Multi-Layer Input Sanitization Systems to Block Malicious User Commands

Prompt Injection Defense in Production LLMs: Building Multi-Layer Input Sanitization Systems to Block Malicious User Commands

Comments
4 min read
Should You Sign Out of OpenAI? The Hugging Face Breach Explained

Should You Sign Out of OpenAI? The Hugging Face Breach Explained

Comments
7 min read
The AI Summary Said "It's Not a Scam." The Springboard Was Your Site's Search Box

The AI Summary Said "It's Not a Scam." The Springboard Was Your Site's Search Box

Comments
6 min read
Mastering Keycloak: Essential Concepts Every Developer Should Know for Application Security

Mastering Keycloak: Essential Concepts Every Developer Should Know for Application Security

Comments
5 min read
🔐 7 JWT Authentication Mistakes I Keep Seeing in Production

🔐 7 JWT Authentication Mistakes I Keep Seeing in Production

Comments 1
3 min read
JWT + OAuth2 + OIDC + PKCE Complete small Guide

JWT + OAuth2 + OIDC + PKCE Complete small Guide

2
Comments
5 min read
I Told the AI "A Scanner Flagged This" — and It Agreed With Everything

Frontier models fall hard for confirmation bias

I Told the AI "A Scanner Flagged This" — and It Agreed With Everything

19
Comments 25
10 min read
Health Data Consent: 3 Rules for Category Checks, Grants, and Revocation (In Migration)

Health Data Consent: 3 Rules for Category Checks, Grants, and Revocation (In Migration)

1
Comments 1
6 min read
I Tried to Prompt-Inject My Own Agent Engine. It Didn't Work. Here's Why.

Structural gates beat prompt safety

I Tried to Prompt-Inject My Own Agent Engine. It Didn't Work. Here's Why.

41
Comments 11
12 min read
The Security Audit That Found 4 Issues in One Weekend

The Security Audit That Found 4 Issues in One Weekend

1
Comments
4 min read
What I scan for in Framer code components

What I scan for in Framer code components

Comments
5 min read
BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

Comments
2 min read
Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Comments
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.