DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Events Calendar: Two Unauthenticated RCE Chains via Unapproved Comments

The Events Calendar: Two Unauthenticated RCE Chains via Unapproved Comments

1
Comments
7 min read
KREMLIN: Forging Chromium Integrity Checks to Steal Banking Sessions

KREMLIN: Forging Chromium Integrity Checks to Steal Banking Sessions

1
Comments
6 min read
Google Pixel CVE-2026-58704: Limited Active Exploitation of Modem Authorization Bypass

Google Pixel CVE-2026-58704: Limited Active Exploitation of Modem Authorization Bypass

1
Comments
6 min read
CHOSEN BRICK: Iranian Windows Surveillance Malware Using Telegram C2

CHOSEN BRICK: Iranian Windows Surveillance Malware Using Telegram C2

1
Comments
7 min read
BragJack: Prompt-Forcing In-Browser AI Agents via Browser Extensions

BragJack: Prompt-Forcing In-Browser AI Agents via Browser Extensions

1
Comments
8 min read
WSO2 CVE-2026-5430: Authentication Bypass in API Management Infrastructure via JWT with Unsupported Algorithm

WSO2 CVE-2026-5430: Authentication Bypass in API Management Infrastructure via JWT with Unsupported Algorithm

1
Comments
6 min read
The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime

The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime

Comments
6 min read
Why I Chose Node.js Transactional Email API — Password Reset Templates That Deliver

Why I Chose Node.js Transactional Email API — Password Reset Templates That Deliver

Comments 1
7 min read
Cómo solucionar el error “Enable JavaScript and cookies to continue”

Cómo solucionar el error “Enable JavaScript and cookies to continue”

Comments
3 min read
PicoCTF Vault Door Training Writeup — Read a Password from Java Source

PicoCTF Vault Door Training Writeup — Read a Password from Java Source

Comments
2 min read
Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

Comments
4 min read
Using SHA256 to Build Trustworthy Data Portals in Brazil

Using SHA256 to Build Trustworthy Data Portals in Brazil

Comments 1
4 min read
Measuring the Check Point VPN exposure: what internet scanning shows after CVE-2026-85102 and CVE-2026-85103

Measuring the Check Point VPN exposure: what internet scanning shows after CVE-2026-85102 and CVE-2026-85103

Comments
2 min read
WebAssembly Beyond the Browser: Building a Sandboxed Plugin System in Node.js & Go

WebAssembly Beyond the Browser: Building a Sandboxed Plugin System in Node.js & Go

5
Comments
3 min read
Finding the Exposed Controllers: Using ZoomEye to Locate Internet-Reachable EtherNet/IP Assets

Finding the Exposed Controllers: Using ZoomEye to Locate Internet-Reachable EtherNet/IP Assets

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.