DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-76443: Injection Flaws in Cisco Secure Email Gateway Management Interfaces

CVE-2026-76443: Injection Flaws in Cisco Secure Email Gateway Management Interfaces

Comments
2 min read
Building a skill-assessment engine for hiring: timed tests, anti-cheat, and category-based matching

Building a skill-assessment engine for hiring: timed tests, anti-cheat, and category-based matching

Comments
1 min read
Your Payment Webhook Handler Probably Processes Duplicates

Your Payment Webhook Handler Probably Processes Duplicates

Comments
6 min read
Your AI coding agent is a security reviewer. It just needs a brief.

Your AI coding agent is a security reviewer. It just needs a brief.

Comments 3
2 min read
Observability — Logs, Metrics, Tracing

Observability — Logs, Metrics, Tracing

1
Comments
3 min read
sUSDe has an admin function that moves a holder's balance to another address. My scanner missed it for weeks.

sUSDe has an admin function that moves a holder's balance to another address. My scanner missed it for weeks.

Comments
3 min read
Your JWT Is Not Encrypted - Here's What's Actually Inside It

Your JWT Is Not Encrypted - Here's What's Actually Inside It

Comments
2 min read
SPF permerror: the two failures that look exactly like a working record

SPF permerror: the two failures that look exactly like a working record

Comments
5 min read
Pull the tenant from the auth context, not the request body

Pull the tenant from the auth context, not the request body

Comments 1
1 min read
Nostra Finance $3.5M Exploit: How an 8,000x Oracle Pump Drained a Starknet Money Market

Nostra Finance $3.5M Exploit: How an 8,000x Oracle Pump Drained a Starknet Money Market

Comments
7 min read
Restorable Backup Safe Cyber Recovery

Restorable Backup Safe Cyber Recovery

Comments
1 min read
I tried to check if our new blockchain tools were being used. The tool that would have told me was also silently broken — and so were two other things.

I tried to check if our new blockchain tools were being used. The tool that would have told me was also silently broken — and so were two other things.

5
Comments 1
3 min read
Keep the Dirty Tree Local: A Spill Gate for Uncommitted Agent Work

Keep the Dirty Tree Local: A Spill Gate for Uncommitted Agent Work

Comments
8 min read
Como impedir que um agente de programação faça mudanças destrutivas sem aprovação humana

Como impedir que um agente de programação faça mudanças destrutivas sem aprovação humana

Comments
3 min read
Transitive dependencies explained: why a package you never installed can still break your build

Transitive dependencies explained: why a package you never installed can still break your build

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.