DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A ZIP can be valid and still unpack badly on another platform: inspect paths with PathParcel

A ZIP can be valid and still unpack badly on another platform: inspect paths with PathParcel

1
Comments
3 min read
Geo-Blocking: Block Malicious Traffic from Specific Countries (2-Minute Setup)

Geo-Blocking: Block Malicious Traffic from Specific Countries (2-Minute Setup)

6
Comments
3 min read
GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

Comments
2 min read
Short-Lived Upload Credentials Without Giving the Browser Too Much Power

Short-Lived Upload Credentials Without Giving the Browser Too Much Power

Comments
3 min read
Your benign set should look malicious

Your benign set should look malicious

Comments
5 min read
Threat Modeling Share Links for Private Event Albums

Threat Modeling Share Links for Private Event Albums

Comments
3 min read
AI Coding Assistants Are Secretly Making Your Code Less Secure

AI Coding Assistants Are Secretly Making Your Code Less Secure

5
Comments
4 min read
OAuth Client Credentials for EDI Pipelines

OAuth Client Credentials for EDI Pipelines

Comments
6 min read
Top AI Agent Security & Guardrails Frameworks in 2026: Defending Against Prompt Injections & Tool Hijacking

Top AI Agent Security & Guardrails Frameworks in 2026: Defending Against Prompt Injections & Tool Hijacking

1
Comments 1
2 min read
How are hashed passwords not the same even if the original passwords are.

How are hashed passwords not the same even if the original passwords are.

Comments
3 min read
Manic Android Malware: Information Theft via Transparent Overlays and Short-Range Device Relaying

Manic Android Malware: Information Theft via Transparent Overlays and Short-Range Device Relaying

Comments
6 min read
Check who owns the files that control your coding agents

Check who owns the files that control your coding agents

Comments
2 min read
MLflow CVE-2026-64849: Cloud Credential Theft via Webhook SSRF

MLflow CVE-2026-64849: Cloud Credential Theft via Webhook SSRF

Comments
6 min read
Rust Crate Tampering: Multi-Stage Info-Stealer Malware Launched via build.rs

Rust Crate Tampering: Multi-Stage Info-Stealer Malware Launched via build.rs

Comments
7 min read
SilkParasite: Cloud C2 and Multi-Language RATs Targeting Central Asia

SilkParasite: Cloud C2 and Multi-Language RATs Targeting Central Asia

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.