DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management
patchvex profile

SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

#security #compliance #soc2 #devsecops
Comments
5 min read
Four things get called "someone is spoofing my domain". DMARC fixes one.
jose_pollman_fa7c6ec43cdd profile

Four things get called "someone is spoofing my domain". DMARC fixes one.

#devops #security #dns #tutorial
Comments 2
4 min read
An SBOM Proves What You Installed. It Can't Prove You Should Have.
alex_spinov profile

An SBOM Proves What You Installed. It Can't Prove You Should Have.

#ai #security #python #agents
1
Comments
20 min read
Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.
zerodrop profile

Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.

#ai #claude #security #devtools
Comments 6
6 min read
PREDICTION-20260701-0009
sha888 profile
SHA888

PREDICTION-20260701-0009

#cybersecurity #security #prediction #infosec
Comments
7 min read
How to Monitor Certificate Transparency Logs for Lookalike Domains
truong_bui_eaec3f963bbe21 profile

How to Monitor Certificate Transparency Logs for Lookalike Domains

#showdev #security #devops #webdev
Comments
3 min read
Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices
robinberaud profile

Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices

#hermes #ai #security #opensource
Comments
2 min read
The Program Said the Cage Was Locked. I Asked the Kernel.
yeriahz profile

The Program Said the Cage Was Locked. I Asked the Kernel.

#ai #security #testing #devops
1
Comments 3
7 min read
Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.
vollos profile
Pon

Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.

#supabase #postgres #security #webdev
Comments 7
4 min read
12 things to check before you ship your vibe-coded app
decivo profile

12 things to check before you ship your vibe-coded app

#vibecoding #security #webdev #ai
Comments 2
5 min read
We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right
saray_chak profile

We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

#ai #security #mcp #devsecops
1
Comments
4 min read
How Journalists, Exes, and Feds All Use the Same 5 Tricks to Find You
numbpill3d profile

How Journalists, Exes, and Feds All Use the Same 5 Tricks to Find You

#discuss #security #cybersecurity #privacy
5
Comments
7 min read
citefid 0.1.0: verificar la fidelidad de citas en wikis OKF con NLI (AUC 0.7029 sobre cĂłdigo)
magopredator profile

citefid 0.1.0: verificar la fidelidad de citas en wikis OKF con NLI (AUC 0.7029 sobre cĂłdigo)

#ai #security #python #opensource
11
Comments
5 min read
Stopping WooCommerce Card Testing Bots with Edge Cryptography
katie_p profile
Kate

Stopping WooCommerce Card Testing Bots with Edge Cryptography

#cybersecurity #fintech #security #wordpress
Comments
3 min read
Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss
grumpysage profile

Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss

#security #ai #devsecops #governance
1
Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.