DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
When AI Infrastructure Becomes the Target: Attacks Observed on LiteLLM, RAGFlow, and Kestra

When AI Infrastructure Becomes the Target: Attacks Observed on LiteLLM, RAGFlow, and Kestra

Comments 2
6 min read
I Audited 12 Open Source JWT Implementations and Found the Same 6 Mistakes

I Audited 12 Open Source JWT Implementations and Found the Same 6 Mistakes

Comments
3 min read
Your AI Is "In Production." That Doesn't Mean It's Production-Ready.

Your AI Is "In Production." That Doesn't Mean It's Production-Ready.

Comments
7 min read
I built a typical AI-generated app and scanned it. It had 5 critical security holes before I touched a line of code.

I built a typical AI-generated app and scanned it. It had 5 critical security holes before I touched a line of code.

Comments 1
4 min read
Universidad FermĂ­n Toro, AuditorĂ­a de Sistemas: CĂłmo Hacer una AuditorĂ­a

Universidad FermĂ­n Toro, AuditorĂ­a de Sistemas: CĂłmo Hacer una AuditorĂ­a

Comments
8 min read
What Does “Protection” Mean in the Digital World? 🔒

What Does “Protection” Mean in the Digital World? 🔒

13
Comments 1
1 min read
The Growing Threat: Attackers Using GitHub Repositories as Malware Staging Mechanisms

The Growing Threat: Attackers Using GitHub Repositories as Malware Staging Mechanisms

10
Comments 1
4 min read
Claude worked out who I work with, from my own blog

Claude worked out who I work with, from my own blog

Comments
4 min read
Sovereignty & Compliance

Sovereignty & Compliance

2
Comments
1 min read
Security Notice: @bananacool467/ui-tools — Use 0.1.9-beta or Newer

Security Notice: @bananacool467/ui-tools — Use 0.1.9-beta or Newer

Comments
4 min read
Your coding agent needs a read-only, task-scoped, expiring credential

Your coding agent needs a read-only, task-scoped, expiring credential

1
Comments 5
4 min read
Tu base de datos es tu backend: reglas de Firestore que no se fĂ­an ni de tu propio cliente

Tu base de datos es tu backend: reglas de Firestore que no se fĂ­an ni de tu propio cliente

Comments
12 min read
NovaCookies: Microsoft 365 AiTM Exploiting Trusted Docusign and Microsoft Redirects

NovaCookies: Microsoft 365 AiTM Exploiting Trusted Docusign and Microsoft Redirects

Comments
6 min read
Who Is the Author? AI-Generated Code and PCI DSS Code Review

Who Is the Author? AI-Generated Code and PCI DSS Code Review

1
Comments 1
3 min read
Canaries, Not Faith: Auditing Where Your Coding Agent Actually Writes

Canaries, Not Faith: Auditing Where Your Coding Agent Actually Writes

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.