DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
JSON Web Tokens (JWT): Deep Dive into Design, Security Risks and Real-World Failures
tilakupadhyay profile

JSON Web Tokens (JWT): Deep Dive into Design, Security Risks and Real-World Failures

#security #api #cybersecurity #applicationsecurity
Comments
4 min read
7 Open-Source Security Tools Every Developer Ignores (But Shouldn't)
sonotommy profile

7 Open-Source Security Tools Every Developer Ignores (But Shouldn't)

#security #opensource #webdev #devops
Comments
6 min read
The Dependency Avalanche: 644 Strangers in Your package.json
vivian-voss profile

The Dependency Avalanche: 644 Strangers in Your package.json

#supplychain #opensource #freebsd #security
Comments
6 min read
We built 24 apps with AI. Three platforms. 561 vulnerabilities.
muhammad_hasan profile

We built 24 apps with AI. Three platforms. 561 vulnerabilities.

#ai #vibecoding #security #manus
1
Comments 2
7 min read
Why output-stage PII masking is the wrong protective surface for data exfiltration in RAG
hashevolution profile

Why output-stage PII masking is the wrong protective surface for data exfiltration in RAG

#rag #security #llm #ai
Comments 2
8 min read
React2Shell (CVE-2025-55182): Exploitation Flow and Secure Coding Lessons
lord-pendragon profile
Hamza for SecDim

React2Shell (CVE-2025-55182): Exploitation Flow and Secure Coding Lessons

#webdev #programming #javascript #security
1
Comments
1 min read
PreviewDrop's Privacy Policy Is Live — What It Means for Teams Who Care About Data
cristian_iridon_286794874 profile

PreviewDrop's Privacy Policy Is Live — What It Means for Teams Who Care About Data

#webdev #security #privacy #saas
Comments
2 min read
Building a DDoS Bouncer: Anomaly Detection with Python & Z-Score
blessing_bill_abe78b8b2fc profile

Building a DDoS Bouncer: Anomaly Detection with Python & Z-Score

#algorithms #cybersecurity #python #security
4
Comments 1
2 min read
I built an open-source dependency intelligence platform in TypeScript — here's how it works
zaydmulani09 profile

I built an open-source dependency intelligence platform in TypeScript — here's how it works

#typescript #opensource #security #webdev
Comments
3 min read
Stop Using Ad-Heavy Online Text Tools. Build or Use Client-Side Utilities Instead.
areebshahid25 profile

Stop Using Ad-Heavy Online Text Tools. Build or Use Client-Side Utilities Instead.

#webdev #programming #productivity #security
Comments
2 min read
572K Weekly Downloads, One Preinstall Script: The SAP CAP Supply Chain Attack Your AI Agent Would Have Missed
toniantunovic profile

572K Weekly Downloads, One Preinstall Script: The SAP CAP Supply Chain Attack Your AI Agent Would Have Missed

#security #npm #supplychain #devops
1
Comments
3 min read
GHSA-H829-5CG7-6HFF: GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify
cverports profile

GHSA-H829-5CG7-6HFF: GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify

#security #cve #cybersecurity #ghsa
Comments
2 min read
What Is Agent Reliability Testing?
athelper profile

What Is Agent Reliability Testing?

#agents #ai #security #testing
Comments
9 min read
Two Retailers, One Attack: What Really Decides Who Survives a Breach
stanleya profile

Two Retailers, One Attack: What Really Decides Who Survives a Breach

#incidentresponse #cybersecurity #websecurity #security
Comments
7 min read
Continuous monitoring caught a credential leak in a published MCP package. Six republishes later, it is still there.
michael_onyekwere profile

Continuous monitoring caught a credential leak in a published MCP package. Six republishes later, it is still there.

#security #supplychain #mcp #npm
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.