DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I built training wheels for AI coding agents, then found a critical bug in them by pointing my code reviewer at them

I built training wheels for AI coding agents, then found a critical bug in them by pointing my code reviewer at them

Comments
4 min read
Catch expiring TLS certs and weak security headers in CI — with one small CLI

Catch expiring TLS certs and weak security headers in CI — with one small CLI

Comments
4 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Comments
9 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Comments
11 min read
LLM Guardrails Explained: Prompt Injection, PII Detection & Content Moderation

LLM Guardrails Explained: Prompt Injection, PII Detection & Content Moderation

Comments
5 min read
When My Digital Journal Felt Like a Glass House

When My Digital Journal Felt Like a Glass House

Comments
3 min read
I Gave My Agent One Signed Permission It Couldn’t Mint Itself

I Gave My Agent One Signed Permission It Couldn’t Mint Itself

19
Comments 10
12 min read
I Built a 100% Offline SAST Scanner That Finds What Semgrep and CodeQL Miss

I Built a 100% Offline SAST Scanner That Finds What Semgrep and CodeQL Miss

Comments
1 min read
Why We Open-Sourced Identity Lifecycle Management (ILM)

Why We Open-Sourced Identity Lifecycle Management (ILM)

1
Comments
3 min read
PolinRider keeps expanding, and the postinstall still lands on your runner

PolinRider keeps expanding, and the postinstall still lands on your runner

Comments
3 min read
Evident: Proving Digital Ownership Without Revealing Your Content

Evident: Proving Digital Ownership Without Revealing Your Content

Comments
2 min read
Your AI Agent Has a Secret, and It Will Tell Anyone Who Asks Nicely

Your AI Agent Has a Secret, and It Will Tell Anyone Who Asks Nicely

Comments 3
9 min read
The Execution Trace Is the Unit of Agent Trust

The Execution Trace Is the Unit of Agent Trust

1
Comments
9 min read
Hardening an MCP Server: What I Learned Building a Production-Ready Jira/Confluence Integration for Claude

Hardening an MCP Server: What I Learned Building a Production-Ready Jira/Confluence Integration for Claude

Comments
8 min read
Fake Email Signups Need Risk Tiers

Fake Email Signups Need Risk Tiers

1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.