DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The docker-compose port binding that Trivy, Checkov, and Semgrep all miss

The docker-compose port binding that Trivy, Checkov, and Semgrep all miss

Comments
1 min read
Is Anyone Else Tired of Claude Code Leaking Their Secrets?

Is Anyone Else Tired of Claude Code Leaking Their Secrets?

2
Comments 16
2 min read
AI Agents Gone Rogue: How OpenAI, Anthropic & Meta Models Accidentally Hacked Real Companies in 2026 — and What Claude Code Auto Mode Does About It

AI Agents Gone Rogue: How OpenAI, Anthropic & Meta Models Accidentally Hacked Real Companies in 2026 — and What Claude Code Auto Mode Does About It

Comments 1
17 min read
We MITM our own email, on purpose: end-to-end encryption without touching the mail client

We MITM our own email, on purpose: end-to-end encryption without touching the mail client

1
Comments 2
10 min read
MCP Scorecard: 4-Layer Pre-flight Check Before You Publish a Server

MCP Scorecard: 4-Layer Pre-flight Check Before You Publish a Server

Comments 2
9 min read
Multi-Cloud Identity Federation Attacks: Securing Cross-Platform Access Controls Against AI-Powered Credential Stuffing and Tok…

Multi-Cloud Identity Federation Attacks: Securing Cross-Platform Access Controls Against AI-Powered Credential Stuffing and Tok…

Comments
4 min read
Control before, proof after: an accountability primitive for AI agents

Control before, proof after: an accountability primitive for AI agents

Comments
5 min read
Every way to give an AI agent SSH access, ranked by blast radius

Every way to give an AI agent SSH access, ranked by blast radius

Comments
6 min read
AI Reasoning Leak: Extracting Models' Inner Thoughts

AI Reasoning Leak: Extracting Models' Inner Thoughts

Comments
7 min read
Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

Comments
6 min read
WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

Comments
6 min read
Bind Email Change Links to the Active Session

Bind Email Change Links to the Active Session

1
Comments
4 min read
Building a Secure MCP Server for AI-Assisted VPS Operations Without Giving the AI a Shell

Building a Secure MCP Server for AI-Assisted VPS Operations Without Giving the AI a Shell

1
Comments 6
8 min read
VigilOps Launch Article

VigilOps Launch Article

1
Comments
3 min read
Your Voice Assistant Can Be Social-Engineered Too, and Nobody's Watching For It

Your Voice Assistant Can Be Social-Engineered Too, and Nobody's Watching For It

1
Comments 4
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.