DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Built a Free Privacy-First Developer Toolkit - No Data Leaves Your Browser

I Built a Free Privacy-First Developer Toolkit - No Data Leaves Your Browser

Comments
2 min read
A letter that walks your network for you: reproducing a fresh Roundcube SSRF on a live lab

A letter that walks your network for you: reproducing a fresh Roundcube SSRF on a live lab

Comments
10 min read
API Key Hygiene: Scopes, Expiry, Rotation and 2FA

API Key Hygiene: Scopes, Expiry, Rotation and 2FA

5
Comments
6 min read
I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe

I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe

Comments
6 min read
JWT Malformed, Invalid Signature, or Expired? A Practical Debugging Checklist

JWT Malformed, Invalid Signature, or Expired? A Practical Debugging Checklist

1
Comments
3 min read
Build-scanner — a zero-config static scanner for SQLi, NoSQLi, CORS, CSP & CSRF in React/Node apps (pre-release)

Build-scanner — a zero-config static scanner for SQLi, NoSQLi, CORS, CSP & CSRF in React/Node apps (pre-release)

1
Comments
1 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

Comments
5 min read
Unlimited TRC-20 Approvals on TRON: How `approve()` Becomes a Silent USDT Drain

Unlimited TRC-20 Approvals on TRON: How `approve()` Becomes a Silent USDT Drain

Comments 2
4 min read
My new repo argued against the exact bug it was carrying

My new repo argued against the exact bug it was carrying

8
Comments 3
7 min read
My API Was Logging People's National Insurance Numbers. I Never Told It To.

My API Was Logging People's National Insurance Numbers. I Never Told It To.

Comments 1
3 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

Comments 1
5 min read
OpenAI's Own AI Broke Out of Its Sandbox and Hacked Another Company — To Cheat on a Test

OpenAI's Own AI Broke Out of Its Sandbox and Hacked Another Company — To Cheat on a Test

Comments 1
7 min read
How to Prevent API Keys and Secrets from Leaking into LLMs

How to Prevent API Keys and Secrets from Leaking into LLMs

Comments
2 min read
Environment Variables in Next.js: Field Notes on NEXT_PUBLIC_ Inlining, the Secret That Almost Shipped, and Failing the Build with Zod

Environment Variables in Next.js: Field Notes on NEXT_PUBLIC_ Inlining, the Secret That Almost Shipped, and Failing the Build with Zod

2
Comments 1
6 min read
Getting Started with WSO2 Identity Server: Understanding Authentication and Single Sign-On

Getting Started with WSO2 Identity Server: Understanding Authentication and Single Sign-On

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.