DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I ran a honeypot for AI agents for 45 days. 82% of the traffic that reached it was an attack.

I ran a honeypot for AI agents for 45 days. 82% of the traffic that reached it was an attack.

1
Comments 2
3 min read
API Security: How to Protect a Public API in 2026

API Security: How to Protect a Public API in 2026

Comments
7 min read
I was tired of clunky PGP tools, so i built my own cross-platform solution: PGP Manager

I was tired of clunky PGP tools, so i built my own cross-platform solution: PGP Manager

2
Comments
4 min read
The Shield Gap: PHI in Platform Events

The Shield Gap: PHI in Platform Events

Comments
5 min read
MCP Deep Dive, Part 8: When a Tool Result Is the Attack — Securing MCP Against Prompt Injection and Tool Abuse

MCP Deep Dive, Part 8: When a Tool Result Is the Attack — Securing MCP Against Prompt Injection and Tool Abuse

1
Comments
6 min read
Rate Limiting in the Next.js App Router: Field Notes on Middleware, Redis, and the Server Action That Looks Like Every Other POST

Rate Limiting in the Next.js App Router: Field Notes on Middleware, Redis, and the Server Action That Looks Like Every Other POST

Comments 1
9 min read
MonkeyCode Human Review: What Evidence Should Make “Approve” Possible?

MonkeyCode Human Review: What Evidence Should Make “Approve” Possible?

Comments
2 min read
Prompt Injection: The AI Security Hole Every Builder Should Know

Prompt Injection: The AI Security Hole Every Builder Should Know

Comments
2 min read
How to Detect and Block SQL Injection Attempts Programmatically

How to Detect and Block SQL Injection Attempts Programmatically

Comments
5 min read
Inside the Chain: the tj-actions compromise wasn't one incident — it was three

Inside the Chain: the tj-actions compromise wasn't one incident — it was three

Comments
2 min read
Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

Coined by Python's Seth Larson in 2025

Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

136
Comments 100
11 min read
The SAML signature was valid. That was never the problem.

The SAML signature was valid. That was never the problem.

5
Comments
3 min read
Dependabot's Three-Day Cooldown Needs an Explicit Exception Policy

Dependabot's Three-Day Cooldown Needs an Explicit Exception Policy

Comments
2 min read
How to Verify Razorpay Webhook Signatures (and Why It Is Not the Payment Signature)

How to Verify Razorpay Webhook Signatures (and Why It Is Not the Payment Signature)

Comments
4 min read
SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner

SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.