DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Entendendo IDOR na prática com um laboratório em Node.js

Entendendo IDOR na prática com um laboratório em Node.js

1
Comments
4 min read
TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

Comments
7 min read
Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Comments
7 min read
38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

Comments
2 min read
Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Comments
7 min read
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

Comments
8 min read
Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Comments
7 min read
I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

Comments
6 min read
glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

1
Comments
2 min read
Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Comments
3 min read
I built a browser-only JWT Creator & Signer — HS256/384/512, verify, expiry check, 77 tests

I built a browser-only JWT Creator & Signer — HS256/384/512, verify, expiry check, 77 tests

Comments
2 min read
I Point a Local LLM at Every Repo Before Opening It in My Editor

I Point a Local LLM at Every Repo Before Opening It in My Editor

4
Comments 1
5 min read
I built a CVE scanner for Python/Node with zero dependencies. Here's why that matters.

I built a CVE scanner for Python/Node with zero dependencies. Here's why that matters.

Comments 1
2 min read
What if your security scanner fixed the code too?

What if your security scanner fixed the code too?

5
Comments
1 min read
A senator says a banned AI broke into nearly all NSA systems in hours

A senator says a banned AI broke into nearly all NSA systems in hours

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.