DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I built this for myself. Then realised other devs probably had the same problem.

I built this for myself. Then realised other devs probably had the same problem.

1
Comments
1 min read
I Built an AI Security Scanner — Then Found a Bug in My Own Detector

I Built an AI Security Scanner — Then Found a Bug in My Own Detector

Comments
4 min read
How I'd Design a Provenance Card for Web Content

How I'd Design a Provenance Card for Web Content

1
Comments
5 min read
I Analyzed 200 Free Online Tools — 87% Upload Your Files Without Clear Disclosure

I Analyzed 200 Free Online Tools — 87% Upload Your Files Without Clear Disclosure

1
Comments 1
1 min read
I red-teamed my own LLM security gateway in four passes. Here's every gap I found.

I red-teamed my own LLM security gateway in four passes. Here's every gap I found.

Comments 1
9 min read
Entendendo IDOR na prática com um laboratório em Node.js

Entendendo IDOR na prática com um laboratório em Node.js

1
Comments
4 min read
Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Comments
7 min read
TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

Comments
7 min read
Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Comments
7 min read
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

Comments
8 min read
38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

38+ Cryptographic Algorithms in Pure Zig - Zero Dependencies, Zero Std Imports

Comments
2 min read
Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Comments
7 min read
I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

Comments
6 min read
Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Building a Cloud Security Home Lab: Learning AWS Security Through Attack, Detection, and Remediation

Comments
3 min read
glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

glasp (with full clasp compatibility)0.3.0 & v0.4.0 — PKCE Support, Timeouts, and Retries

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.