DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How Many MikroTik Devices Are Actually Reachable From the Internet?

How Many MikroTik Devices Are Actually Reachable From the Internet?

Comments
3 min read
Most supply chain security tools react. They scan your `package-lock.json` or `go.sum`, fl

Most supply chain security tools react. They scan your `package-lock.json` or `go.sum`, fl

Comments
2 min read
DMARC aggregate reports are XML, in a gzip, in an email. Nobody reads them.

DMARC aggregate reports are XML, in a gzip, in an email. Nobody reads them.

Comments
3 min read
What Is a Parser Differential? How Can the Same Input Mean Different Things to Different Systems?

What Is a Parser Differential? How Can the Same Input Mean Different Things to Different Systems?

1
Comments
6 min read
The Virtualization Control Plane on the Internet: What ZoomEye Shows About Management Exposure

The Virtualization Control Plane on the Internet: What ZoomEye Shows About Management Exposure

Comments
3 min read
Overpatch and Heapjack: Two Techniques for Bypassing Codex's Write Restrictions and Escaping Its Read-Only Sandbox

Overpatch and Heapjack: Two Techniques for Bypassing Codex's Write Restrictions and Escaping Its Read-Only Sandbox

2
Comments
9 min read
Patching Guide for CVE-2026-75650: Closing the Adobe Commerce RCE

Patching Guide for CVE-2026-75650: Closing the Adobe Commerce RCE

Comments
3 min read
An AI Agent Swarm Hit 440 PaperCut Servers in 26 Seconds Per Target. The Education Sector Didn’t Stand a Chance.

An AI Agent Swarm Hit 440 PaperCut Servers in 26 Seconds Per Target. The Education Sector Didn’t Stand a Chance.

3
Comments
7 min read
Validate the JWT audience claim

Validate the JWT audience claim

Comments
1 min read
Why I Built an Open-Source, E2EE-Synced Termius Alternative (and What Broke Along the Way)

Why I Built an Open-Source, E2EE-Synced Termius Alternative (and What Broke Along the Way)

Comments
4 min read
SonicWall SMA 1000 Remains a Small but Critical Edge Exposure After September's KEV Additions

SonicWall SMA 1000 Remains a Small but Critical Edge Exposure After September's KEV Additions

Comments
4 min read
Why a Single Email Is Enough to Root a Cisco Secure Email Gateway

Why a Single Email Is Enough to Root a Cisco Secure Email Gateway

Comments
4 min read
Agent Skills and MCP Configs Need a Security Gate

Agent Skills and MCP Configs Need a Security Gate

Comments
4 min read
Sleep Mask in Red Team vs. Blue Team Engagements (Part 1): A Deep Dive into Ekko's Timer-Based Obfuscation

Sleep Mask in Red Team vs. Blue Team Engagements (Part 1): A Deep Dive into Ekko's Timer-Based Obfuscation

Comments
12 min read
Dumping Every User's Plaintext Password Without Touching the Database

Dumping Every User's Plaintext Password Without Touching the Database

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.