DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Claude Code CLI Vulnerability: Malicious Configs Bypass Trust Dialog, Enabling Unauthorized Permission Elevation

Claude Code CLI Vulnerability: Malicious Configs Bypass Trust Dialog, Enabling Unauthorized Permission Elevation

Comments
10 min read
48 Hours After Publishing: Second-Order Injection Field Notes

48 Hours After Publishing: Second-Order Injection Field Notes

7
Comments
2 min read
RSAC 2026 Just Shipped Four New Agent Security Models. None of Them Solve Identity Portability.

RSAC 2026 Just Shipped Four New Agent Security Models. None of Them Solve Identity Portability.

Comments
3 min read
VoltAgent Just Asked Us to Build Their Guardrail Provider Interface. Here Is What We Shipped.

VoltAgent Just Asked Us to Build Their Guardrail Provider Interface. Here Is What We Shipped.

Comments
3 min read
I Built a Policy Drift Detector for LLM Agents. Here's What Four Versions Taught Me.

Tracks gradual policy erosion across turns

I Built a Policy Drift Detector for LLM Agents. Here's What Four Versions Taught Me.

7
Comments 4
6 min read
I ran the same smart contract through three AI security audits. The brief was the bug.

I ran the same smart contract through three AI security audits. The brief was the bug.

Comments
3 min read
15 Security Practices I Applied to My FastAPI Side Project

15 Security Practices I Applied to My FastAPI Side Project

Comments
6 min read
Notes from Reading Claude Code's Leaked Source

Notes from Reading Claude Code's Leaked Source

1
Comments 1
17 min read
Evidence Stores for Supply Chain Security

Evidence Stores for Supply Chain Security

Comments
3 min read
IDOR in AI-Generated APIs: What Cursor Won't Check for You

IDOR in AI-Generated APIs: What Cursor Won't Check for You

3
Comments 2
3 min read
Hack The Box - Snapped Writeup

Hack The Box - Snapped Writeup

2
Comments
6 min read
Lessons From Processing Millions of Telegram Messages: What We Learned About Spam

Lessons From Processing Millions of Telegram Messages: What We Learned About Spam

1
Comments
3 min read
You Can’t Secure Public APIs — You Can Only Control Them

You Can’t Secure Public APIs — You Can Only Control Them

1
Comments
2 min read
How to Build True Multi-Tenant Database Isolation (Stop using if-statements)

How to Build True Multi-Tenant Database Isolation (Stop using if-statements)

2
Comments 2
3 min read
1Password Just Launched Unified Access with Anthropic, Cursor, and Vercel. Credential Vaults Are Not Identity.

1Password Just Launched Unified Access with Anthropic, Cursor, and Vercel. Credential Vaults Are Not Identity.

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.