DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
atob() can't decode a JWT — the Base64URL gotcha (and the fix)

atob() can't decode a JWT — the Base64URL gotcha (and the fix)

1
Comments
3 min read
Your MCP write returned 200. Did the right thing actually happen?

Your MCP write returned 200. Did the right thing actually happen?

6
Comments 3
9 min read
Capturing Your First Web Request with Wireshark on Windows

Capturing Your First Web Request with Wireshark on Windows

Comments
2 min read
Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Comments
5 min read
TeamCity CVE-2026-63077: Unauthenticated RCE Exploited in Ransomware Campaigns

TeamCity CVE-2026-63077: Unauthenticated RCE Exploited in Ransomware Campaigns

Comments
6 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

Comments
5 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

Comments 2
11 min read
My passwords no longer leave my house

My passwords no longer leave my house

Comments 2
3 min read
Zero Human Auth for AI Agents: How to Replace OAuth with Cryptographic Passport

Zero Human Auth for AI Agents: How to Replace OAuth with Cryptographic Passport

Comments
7 min read
SOE Compliant Office Agent Skill System: 20 Skills Across 3 Domains

SOE Compliant Office Agent Skill System: 20 Skills Across 3 Domains

Comments
3 min read
Every vendor says they detect AI agents. None of them can.

Every vendor says they detect AI agents. None of them can.

5
Comments
1 min read
Cursor Learned to Code From Tutorials That Skip Security

Cursor Learned to Code From Tutorials That Skip Security

5
Comments 1
5 min read
SPF's 10-lookup limit: why your SPF silently fails, and how to fix it

SPF's 10-lookup limit: why your SPF silently fails, and how to fix it

Comments
4 min read
10 Signs Your Windows PC May Be Compromised and How to Monitor Them۰۰

10 Signs Your Windows PC May Be Compromised and How to Monitor Them۰۰

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.