DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
El peligro del "Vibe Coding": Por qué la Inteligencia Artificial en el desarrollo de software es una bomba de tiempo para la seguridad

El peligro del "Vibe Coding": Por qué la Inteligencia Artificial en el desarrollo de software es una bomba de tiempo para la seguridad

1
Comments
3 min read
OWASP A01 and A02: Broken Access Control and Security Misconfiguration

OWASP A01 and A02: Broken Access Control and Security Misconfiguration

5
Comments 2
3 min read
Account Permission Delegation - QA Test Report

Account Permission Delegation - QA Test Report

1
Comments
3 min read
I'm Entering My First Sherlock Audit Contest: The Setup, the Plan, the Fear

I'm Entering My First Sherlock Audit Contest: The Setup, the Plan, the Fear

1
Comments
5 min read
Verifying Webhook Signatures by Hand: HMAC-SHA256 and Why Yours Keeps Failing

Verifying Webhook Signatures by Hand: HMAC-SHA256 and Why Yours Keeps Failing

Comments
4 min read
gate.cat: a deterministic, fail-closed veto that stops AI coding agents before rm -rf

gate.cat: a deterministic, fail-closed veto that stops AI coding agents before rm -rf

Comments 5
2 min read
Tamper-Resistant Test Design Is What the Suite Now Owes the Codebase

Tamper-Resistant Test Design Is What the Suite Now Owes the Codebase

1
Comments
13 min read
Post-Quantum DNS and TLS: What ML-DSA Means for Your Site

Post-Quantum DNS and TLS: What ML-DSA Means for Your Site

Comments
7 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Comments
2 min read
Installing VeraCrypt on Ubuntu 24.04

Installing VeraCrypt on Ubuntu 24.04

16
Comments
2 min read
Block SSRF Redirect Chains Before Your URL Fetcher Reaches Private Networks

Block SSRF Redirect Chains Before Your URL Fetcher Reaches Private Networks

Comments
4 min read
The Software Still Has to Be Right: Review Is No Longer Enough

The Software Still Has to Be Right: Review Is No Longer Enough

Comments
14 min read
Unit 42: Real-World Prevalence of 405 AI-Related Malware Samples and Evaluation of Existing Defenses

Unit 42: Real-World Prevalence of 405 AI-Related Malware Samples and Evaluation of Existing Defenses

Comments
7 min read
CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments

CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments

Comments
6 min read
Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique

Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.