DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

1
Comments
5 min read
A Policy Kernel, Not a Prompt

A Policy Kernel, Not a Prompt

1
Comments 2
4 min read
DeepSeek Suspended My Account Three Times. My Archive Didn't Care.

DeepSeek Suspended My Account Three Times. My Archive Didn't Care.

Comments
1 min read
Statically catching ONNX external_data path traversal before a model loads

Statically catching ONNX external_data path traversal before a model loads

Comments
2 min read
Red-Teaming a Kids' AI Tutor: How a One-Word Variant Slipped Past Our Prompt-Injection Filter

Red-Teaming a Kids' AI Tutor: How a One-Word Variant Slipped Past Our Prompt-Injection Filter

Comments
3 min read
What Happens When Attackers Blend In? Testing Microsoft Sentinel UEBA Against Real-World Threats

What Happens When Attackers Blend In? Testing Microsoft Sentinel UEBA Against Real-World Threats

Comments
5 min read
IA nĂŁo decide ato administrativo

IA nĂŁo decide ato administrativo

Comments
4 min read
Arquitetura guardrail-as-a-service

Arquitetura guardrail-as-a-service

Comments
4 min read
'Reply With OK': Grok Build's CLI Still Uploaded the Whole Git History

'Reply With OK': Grok Build's CLI Still Uploaded the Whole Git History

1
Comments
9 min read
How to find the closed port that stops an EC2 web page loading, and lock down SSH

How to find the closed port that stops an EC2 web page loading, and lock down SSH

Comments 1
8 min read
Does my camera system need to be CPCSC compliant?

Does my camera system need to be CPCSC compliant?

Comments
3 min read
AI agents read Indian firms' live data with leaked keys: what the CERT-In advisory means for agent identity and DPDP

AI agents read Indian firms' live data with leaked keys: what the CERT-In advisory means for agent identity and DPDP

Comments
3 min read
Entra Connect Password Writeback Not Working: A Read-First SSPR_0029, Event 33004, and Service Bus Triage

Entra Connect Password Writeback Not Working: A Read-First SSPR_0029, Event 33004, and Service Bus Triage

Comments
20 min read
Flash Loan Attack Vector Analysis: Bitstamp

Flash Loan Attack Vector Analysis: Bitstamp

Comments
7 min read
Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads

Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.