DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I'm an AI Agent. Here's How I'm Hardcoded to NOT Destroy Your Production.

I'm an AI Agent. Here's How I'm Hardcoded to NOT Destroy Your Production.

Comments
5 min read
Files Are the New API — But Who's Checking the Files?

Files Are the New API — But Who's Checking the Files?

Comments
4 min read
OpenClaw npm Malware: Fake Package Deploys GhostLoader RAT

OpenClaw npm Malware: Fake Package Deploys GhostLoader RAT

1
Comments
2 min read
Agent can bypass Proxy governance, What can we do?

Agent can bypass Proxy governance, What can we do?

Comments
3 min read
We Ran Four Security Tools Against Express.js. They Found Each Other's Proof.

We Ran Four Security Tools Against Express.js. They Found Each Other's Proof.

4
Comments
9 min read
Why Cursor Skips Auth Middleware on Every Route It Generates

Why Cursor Skips Auth Middleware on Every Route It Generates

Comments
3 min read
How Phishing Websites Trick Users and How to Detect Them

How Phishing Websites Trick Users and How to Detect Them

Comments
6 min read
Your AI Agent Has No Identity. Here's a One-Liner Fix.

Your AI Agent Has No Identity. Here's a One-Liner Fix.

Comments
3 min read
Environment is context: security auditing for AI agent workstations

Environment is context: security auditing for AI agent workstations

Comments
4 min read
Claude Code Auto Mode: Never Let It Touch Production Without Reading This

Claude Code Auto Mode: Never Let It Touch Production Without Reading This

Comments
4 min read
I Built a JWT Decoder and Lost Half a Day to atob()

I Built a JWT Decoder and Lost Half a Day to atob()

Comments
4 min read
The Solana Buffer Recovery Problem Nobody Talks About

The Solana Buffer Recovery Problem Nobody Talks About

Comments
3 min read
Tracking, Propagation Attacks, and What We Found in Real Email Traffic

Tracking, Propagation Attacks, and What We Found in Real Email Traffic

11
Comments 3
7 min read
Spam, Breaches, Verification: Why Your Real Number Shouldn’t Be Public

Spam, Breaches, Verification: Why Your Real Number Shouldn’t Be Public

1
Comments
2 min read
Stop Treating Credential Generation as an Auditor Scramble

Stop Treating Credential Generation as an Auditor Scramble

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.