DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-109518: The APT Verification Bypass and What to Do About It

CVE-2026-109518: The APT Verification Bypass and What to Do About It

Comments
2 min read
Kubernetes service-account token mounting deserves an explicit opt-out

Kubernetes service-account token mounting deserves an explicit opt-out

Comments
3 min read
Every Commercial Model Refused. He Swapped the Model Nine Times in 19 Days. The Skill File Never Changed.

Every Commercial Model Refused. He Swapped the Model Nine Times in 19 Days. The Skill File Never Changed.

Comments
9 min read
N-able N-central: 33 Zero-Days, Cloud Offline, Shut Your Servers Down

N-able N-central: 33 Zero-Days, Cloud Offline, Shut Your Servers Down

Comments
1 min read
Aider will run a model's shell command with no confirmation if stdin is closed

Aider will run a model's shell command with no confirmation if stdin is closed

1
Comments
2 min read
Malware Reverse Engineering: What Your SOC Should Get Back

Malware Reverse Engineering: What Your SOC Should Get Back

Comments
5 min read
BOLA: your API checks the URL but misses IDs in the JSON body

BOLA: your API checks the URL but misses IDs in the JSON body

Comments
8 min read
The CRA cybersecurity risk assessment for mobile apps, with a template

The CRA cybersecurity risk assessment for mobile apps, with a template

Comments
10 min read
Stamping the downloader's email on every PDF page at download time in PHP

Stamping the downloader's email on every PDF page at download time in PHP

Comments
3 min read
ChatGPT Desktop forwards your SSH agent to remote machines!

ChatGPT Desktop forwards your SSH agent to remote machines!

Comments
5 min read
Why Log Redaction Alone Won't Save Your API Keys

Why Log Redaction Alone Won't Save Your API Keys

Comments
2 min read
Removing ads, telemetry and AI extras from Windows 11: a practical checklist

Removing ads, telemetry and AI extras from Windows 11: a practical checklist

Comments
5 min read
38,000 AI-found vulnerabilities, 217 fixed: auditing Glasswing, Anthropic's bug-discovery machine

38,000 AI-found vulnerabilities, 217 fixed: auditing Glasswing, Anthropic's bug-discovery machine

6
Comments 3
5 min read
How browser encryption actually works in a private notepad

How browser encryption actually works in a private notepad

Comments
4 min read
Advanced Prompt Injection via MCP Tool Results (Security 3)

Advanced Prompt Injection via MCP Tool Results (Security 3)

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.