DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What Is a Vulnerability, Really? Source, Sink, and Taint

What Is a Vulnerability, Really? Source, Sink, and Taint

22
Comments 5
6 min read
How to prevent member accounts from leaving your AWS organization

How to prevent member accounts from leaving your AWS organization

Comments
2 min read
Software Composition Analysis (SCA): The 2026 Complete Guide

Software Composition Analysis (SCA): The 2026 Complete Guide

Comments
7 min read
Stop Using 'password123': A Developer's Guide to Strong Passwords

Stop Using 'password123': A Developer's Guide to Strong Passwords

Comments
2 min read
Spring AI 2.0.1 Fixed 7 CVEs. One of Them Lets a Prompt Call Tools You Never Advertised

Spring AI 2.0.1 Fixed 7 CVEs. One of Them Lets a Prompt Call Tools You Never Advertised

Comments
8 min read
An agent that remembers everything is a secret leak with a good memory

An agent that remembers everything is a secret leak with a good memory

2
Comments 2
8 min read
Automatic HTTPS on Kestrel in 2026, now that LettuceEncrypt is archived

Automatic HTTPS on Kestrel in 2026, now that LettuceEncrypt is archived

1
Comments 2
2 min read
Today's the Deadline: Three Separate CISA Patch Orders Just Collided on the Same Weekend

Today's the Deadline: Three Separate CISA Patch Orders Just Collided on the Same Weekend

1
Comments
4 min read
I built a self-hosted one-time secrets service in Node — here's the threat model

I built a self-hosted one-time secrets service in Node — here's the threat model

1
Comments
2 min read
Treat Copilot Code-Review Instructions as Untrusted Policy Input

Treat Copilot Code-Review Instructions as Untrusted Policy Input

Comments
1 min read
Server Security Audit Checklist: What Actually Gets Checked

Server Security Audit Checklist: What Actually Gets Checked

Comments
4 min read
WireGuard VPN: Secure Remote Access for Your Homelab

WireGuard VPN: Secure Remote Access for Your Homelab

Comments 2
12 min read
A 9.8 Critical CVE That Never Existed: How to Filter Fake Vulnerabilities Out of Your Java Pipeline

A 9.8 Critical CVE That Never Existed: How to Filter Fake Vulnerabilities Out of Your Java Pipeline

Comments
8 min read
CVE-2026-69836: Entra ID CVSS 10.0 RCE — What Business Owners Should Know

CVE-2026-69836: Entra ID CVSS 10.0 RCE — What Business Owners Should Know

Comments
2 min read
Why AI-Generated Code Needs Independent Verification

Why AI-Generated Code Needs Independent Verification

Comments 3
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.