DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A fake client sent me a GitHub repo. Running it cost me two days and every password I had.

A fake client sent me a GitHub repo. Running it cost me two days and every password I had.

8
Comments 2
6 min read
The White House Accuses Moonshot of Copying Anthropic: What AI 'Distillation' Actually Means

The White House Accuses Moonshot of Copying Anthropic: What AI 'Distillation' Actually Means

Comments
3 min read
SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

Comments
5 min read
Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

Comments
6 min read
A HAR file is an auth dump: a 30-second safe-sharing checklist

A HAR file is an auth dump: a 30-second safe-sharing checklist

Comments
3 min read
Your AI Agent Bought the Wrong Thing. Who Pays?

Your AI Agent Bought the Wrong Thing. Who Pays?

Comments 2
5 min read
Model Context Protocol Through The Agent Stack Lens: What Broke, What's Fixed July 28, and What to Check Before Your Next mcp.json

Model Context Protocol Through The Agent Stack Lens: What Broke, What's Fixed July 28, and What to Check Before Your Next mcp.json

1
Comments 1
5 min read
Structured Security Findings From a 7B Model: The Schema That Stopped Breaking

Structured Security Findings From a 7B Model: The Schema That Stopped Breaking

1
Comments
5 min read
Organization and Multi-Tenant Authentication

Organization and Multi-Tenant Authentication

Comments
9 min read
Adding OAuth and Social Login

Adding OAuth and Social Login

Comments
10 min read
Building a Secure API Starter Without Hiding the Hard Parts

Building a Secure API Starter Without Hiding the Hard Parts

1
Comments 1
2 min read
Audit Logs You Can Trust

Audit Logs You Can Trust

Comments
9 min read
MCP server security checklist before you publish

MCP server security checklist before you publish

Comments
4 min read
The CSP that killed our own form (a production-only Next.js bug)

The CSP that killed our own form (a production-only Next.js bug)

1
Comments
5 min read
JWT Debugging: 5 Tasks You'll Hit Daily (and How to Handle Them Without a Library)

JWT Debugging: 5 Tasks You'll Hit Daily (and How to Handle Them Without a Library)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.