DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Catch expiring TLS certs and weak security headers in CI — with one small CLI

Catch expiring TLS certs and weak security headers in CI — with one small CLI

Comments
4 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Comments
11 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Comments
9 min read
LLM Guardrails Explained: Prompt Injection, PII Detection & Content Moderation

LLM Guardrails Explained: Prompt Injection, PII Detection & Content Moderation

Comments
5 min read
When My Digital Journal Felt Like a Glass House

When My Digital Journal Felt Like a Glass House

Comments
3 min read
I Gave My Agent One Signed Permission It Couldn’t Mint Itself

I Gave My Agent One Signed Permission It Couldn’t Mint Itself

19
Comments 10
12 min read
I Built a 100% Offline SAST Scanner That Finds What Semgrep and CodeQL Miss

I Built a 100% Offline SAST Scanner That Finds What Semgrep and CodeQL Miss

Comments
1 min read
Why We Open-Sourced Identity Lifecycle Management (ILM)

Why We Open-Sourced Identity Lifecycle Management (ILM)

1
Comments
3 min read
PolinRider keeps expanding, and the postinstall still lands on your runner

PolinRider keeps expanding, and the postinstall still lands on your runner

Comments
3 min read
Evident: Proving Digital Ownership Without Revealing Your Content

Evident: Proving Digital Ownership Without Revealing Your Content

Comments
2 min read
Your AI Agent Has a Secret, and It Will Tell Anyone Who Asks Nicely

Your AI Agent Has a Secret, and It Will Tell Anyone Who Asks Nicely

Comments 3
9 min read
The Execution Trace Is the Unit of Agent Trust

The Execution Trace Is the Unit of Agent Trust

1
Comments
9 min read
Hardening an MCP Server: What I Learned Building a Production-Ready Jira/Confluence Integration for Claude

Hardening an MCP Server: What I Learned Building a Production-Ready Jira/Confluence Integration for Claude

Comments
8 min read
Fake Email Signups Need Risk Tiers

Fake Email Signups Need Risk Tiers

1
Comments
4 min read
We asked for verification methods to declare their failure mode. Then we found four ways that isn't enough.

We asked for verification methods to declare their failure mode. Then we found four ways that isn't enough.

Comments 3
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.