DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Account Takeover Attacks: Why Authentication Isn’t the Real Problem

Account Takeover Attacks: Why Authentication Isn’t the Real Problem

Comments
4 min read
It refused to run a dangerous option. I wrote it one character shorter, and it ran

It refused to run a dangerous option. I wrote it one character shorter, and it ran

Comments 2
9 min read
Applying a SAST Tool to a Real Application: Finding and Fixing 10 Vulnerabilities with Bandit

Applying a SAST Tool to a Real Application: Finding and Fixing 10 Vulnerabilities with Bandit

Comments
5 min read
AgentAudit: Static security analysis for AI coding agent sessions

AgentAudit: Static security analysis for AI coding agent sessions

Comments
1 min read
Applying SAST to a PHP Application with Psalm's Taint Analysis

Applying SAST to a PHP Application with Psalm's Taint Analysis

Comments 1
5 min read
I built a linter for Splunk SPL — then ran it against Splunk's own detection library

I built a linter for Splunk SPL — then ran it against Splunk's own detection library

Comments
4 min read
My agent kept reading data it wasn't allowed to. The prompt was never going to stop it.

My agent kept reading data it wasn't allowed to. The prompt was never going to stop it.

Comments
10 min read
The Invisible Attack Surface: Why Machine Identities Are Cloud Security's Biggest Blind Spot

The Invisible Attack Surface: Why Machine Identities Are Cloud Security's Biggest Blind Spot

Comments
5 min read
SPF passed. DKIM passed. DMARC failed. Nothing is broken.

SPF passed. DKIM passed. DMARC failed. Nothing is broken.

Comments
5 min read
The Microsoft UEFI CA from 2011 expired last week. Here's what to check.

The Microsoft UEFI CA from 2011 expired last week. Here's what to check.

Comments
2 min read
OAuth Token Flows and Microsoft Entra ID: How One Application Proves Who It Is to Another

OAuth Token Flows and Microsoft Entra ID: How One Application Proves Who It Is to Another

Comments
8 min read
AI Won’t Replace You—Here’s What Will

AI Won’t Replace You—Here’s What Will

Comments
7 min read
Memory Tagging (MTE): Hardware That Catches Memory Bugs

Memory Tagging (MTE): Hardware That Catches Memory Bugs

Comments
5 min read
3 Times You Need Base64 (and One Time You Definitely Don't)

3 Times You Need Base64 (and One Time You Definitely Don't)

Comments
2 min read
I built a browser-only HTTP Cookie Inspector — parse Set-Cookie, security score, XSS/CSRF flags, 84 tests

I built a browser-only HTTP Cookie Inspector — parse Set-Cookie, security score, XSS/CSRF flags, 84 tests

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.