DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Azure Data Theft Campaign: F500 Breach Anatomy & Operator TTPs

Azure Data Theft Campaign: F500 Breach Anatomy & Operator TTPs

Comments
6 min read
Testing That Secrets Cannot Reach Logs in Go

Testing That Secrets Cannot Reach Logs in Go

Comments
4 min read
Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

Comments
1 min read
The Importance of a Risk Framework in Corporate Cybersecurity

The Importance of a Risk Framework in Corporate Cybersecurity

Comments
8 min read
When a Vendor You Use Gets Breached: What to Do Next

When a Vendor You Use Gets Breached: What to Do Next

Comments
6 min read
Unified Secrets Security with GitGuardian and AWS Secrets Manager

Unified Secrets Security with GitGuardian and AWS Secrets Manager

Comments
5 min read
I Asked 'Do You Trust an Agent That Says the Tests Passed?' — 68 Comments Later, Here's What I Learned

I Asked 'Do You Trust an Agent That Says the Tests Passed?' — 68 Comments Later, Here's What I Learned

3
Comments 3
3 min read
SSH agent forwarding is a footgun. Use ProxyJump instead.

SSH agent forwarding is a footgun. Use ProxyJump instead.

1
Comments
3 min read
What Building a Port Scanner Taught Me About Trust in Networks

What Building a Port Scanner Taught Me About Trust in Networks

Comments
5 min read
The Trust Crisis Between AI Agents: Zero-Trust Authentication in Practice

The Trust Crisis Between AI Agents: Zero-Trust Authentication in Practice

Comments
11 min read
Cloudflare Tunnel Without Opening a Single Firewall Port

Cloudflare Tunnel Without Opening a Single Firewall Port

Comments
4 min read
How to Detect Credential Stuffing Attacks in Nginx Logs

How to Detect Credential Stuffing Attacks in Nginx Logs

Comments
5 min read
Cybersecurity from Zero to Hero #2: Threats, Vulnerabilities and Risk Are Not the Same Thing

Cybersecurity from Zero to Hero #2: Threats, Vulnerabilities and Risk Are Not the Same Thing

Comments
4 min read
How to Implement OTP Verification in a Web Application (React + Node.js + Fast2SMS)

How to Implement OTP Verification in a Web Application (React + Node.js + Fast2SMS)

Comments
4 min read
Your JWT payload is public. Read it before an attacker does.

Your JWT payload is public. Read it before an attacker does.

2
Comments 2
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.