DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Scoping MCP tool access per client, and auditing every call
royalpinto007 profile

Scoping MCP tool access per client, and auditing every call

#mcp #ai #security #typescript
Comments
4 min read
Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines
she11_qa profile

Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

#security #devops #testing #automation
Comments
1 min read
MFA Enabled Is Not MFA Verified
iqtechsolutions profile

MFA Enabled Is Not MFA Verified

#dotnet #csharp #security #aspnetcore
Comments
4 min read
Building a Secrets Scanner for CI/CD Pipelines
ayinedjimi-consultants profile

Building a Secrets Scanner for CI/CD Pipelines

#security #python #devops #tutorial
Comments
5 min read
Why Kubernetes Exec Is Secret-Adjacent in Agentic Operations
devamparikh profile

Why Kubernetes Exec Is Secret-Adjacent in Agentic Operations

#kubernetes #security #sre #devops
2
Comments
3 min read
Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools
anoymask profile

Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools

#security #threatintel
1
Comments
10 min read
How to Verify Slack Request Signatures (and Not Get Your Endpoint Disabled)
eventdock profile

How to Verify Slack Request Signatures (and Not Get Your Endpoint Disabled)

#webhooks #slack #node #security
1
Comments
4 min read
How to Validate Twilio Webhook Signatures (and the Proxy Trap That Breaks Them)
eventdock profile

How to Validate Twilio Webhook Signatures (and the Proxy Trap That Breaks Them)

#webhooks #twilio #node #security
1
Comments
4 min read
Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks
leobaniak profile
Leo

Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks

#github #supplychain #security #reconnaissance
1
Comments
2 min read
Verify a Self-Hosted Installer Before Running It as Root
odd_background_328 profile

Verify a Self-Hosted Installer Before Running It as Root

#devops #security #linux #selfhosted
Comments
3 min read
Falco on Kubernetes: Runtime Security with eBPF
amareswer profile

Falco on Kubernetes: Runtime Security with eBPF

#kubernetes #security #devsecops #falco
Comments
5 min read
AudioTrust: reconciliar C2PA y watermark AudioSeal en audio sintético
magopredator profile

AudioTrust: reconciliar C2PA y watermark AudioSeal en audio sintético

#ai #security #python #opensource
1
Comments 3
4 min read
Making a remote service look local - (dsh as a case study)
neil_agentic profile

Making a remote service look local - (dsh as a case study)

#networking #distributedsystems #security #p2p
1
Comments
2 min read
Why Post-Quantum Signatures Matter, and How Quantum-Lattice Implements Them
althaafm profile

Why Post-Quantum Signatures Matter, and How Quantum-Lattice Implements Them

#cryptography #blockchain #rust #security
Comments
3 min read
How Zero-Knowledge Encryption Actually Works (with the Web Crypto API)
sudeepbhandari profile

How Zero-Knowledge Encryption Actually Works (with the Web Crypto API)

#security #webdev #javascript #privacy
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.