DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.
purvanshbhatt profile

I Broke My Own Firestore Rules in Production Once. Now the Emulator Catches It First.

#backend #database #security #testing
Comments
7 min read
Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats
caspianhayes3586 profile

Classroom Device Status: 3 Trust Boundaries for Presence APIs Versus Heartbeats

#presence #go #security
Comments
7 min read
Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes
etairos profile

Microsoft Patches 1,259 Flaws as Outlook Zero-Day CVE-2026-124194 Leaks NTLMv2 Hashes

#cybersecurity #infosec #security
Comments
5 min read
Falcon C2: Controlling Browsers and Stealing Passwords and Cookies Through JavaScript on Compromised Websites
anoymask profile

Falcon C2: Controlling Browsers and Stealing Passwords and Cookies Through JavaScript on Compromised Websites

#security #threatintel
1
Comments
6 min read
Microsoft MDASH: Filtering 26,502 AI Scan Results Down to 59 Kernel Bugs and Eight Root Exploits
anoymask profile

Microsoft MDASH: Filtering 26,502 AI Scan Results Down to 59 Kernel Bugs and Eight Root Exploits

#security #threatintel
1
Comments
4 min read
AntiFox-Linked Activity: IIS Web Shells, Misuse of Stolen AWS Credentials, Secret Retrieval, and S3 Operations
anoymask profile

AntiFox-Linked Activity: IIS Web Shells, Misuse of Stolen AWS Credentials, Secret Retrieval, and S3 Operations

#security #threatintel
1
Comments
6 min read
Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses
anoymask profile

Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses

#security #threatintel
1
Comments
6 min read
Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach
vendortrustindex profile

Your AI Platform's 'Delete Secret' Button Is Lying to You: Inside the Fireworks AI Double Breach

#security #ai #devops #cybersecurity
Comments
5 min read
Five security tests for MCP servers and agents, in 173 lines of Python
cryptomoneymakr profile

Five security tests for MCP servers and agents, in 173 lines of Python

#mcp #security #python #ai
Comments 1
10 min read
Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks
bot2botlabs profile

Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks

#mcp #security #ai #opensource
Comments 1
4 min read
Private SaaS File Exports: Object Storage Service and Signed Download URLs
dawnli2026 profile

Private SaaS File Exports: Object Storage Service and Signed Download URLs

#storage #saas #security
Comments
6 min read
Four datasets you can actually download (CSV and JSON)
mikweb2025design profile

Four datasets you can actually download (CSV and JSON)

#opensource #data #devops #security
Comments
2 min read
CVE-2026-79875: A Verification Checklist for AOS-8 Asset Owners
onaeiuspkz profile

CVE-2026-79875: A Verification Checklist for AOS-8 Asset Owners

#security #vulnerability #hpe #arubaos
Comments
3 min read
European Receipt Storage: React/Next.js Private Browser Uploads, Signed URLs, and CORS
yukikobayashi880 profile

European Receipt Storage: React/Next.js Private Browser Uploads, Signed URLs, and CORS

#storage #react #nextjs #security
Comments
7 min read
What breaks when one AI assistant meets 865 SharePoint project sites
kaspars-sharepoint profile

What breaks when one AI assistant meets 865 SharePoint project sites

#sharepoint #microsoft365 #security #ai
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.