DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

Comments
6 min read
STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

Comments
5 min read
GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

Comments
5 min read
TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

Comments
5 min read
How AegisLink's handshake survives a quantum computer (X3DH + ML-KEM-768)

How AegisLink's handshake survives a quantum computer (X3DH + ML-KEM-768)

Comments
3 min read
GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

Comments 1
4 min read
A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

Comments 2
6 min read
Hello, DEV — I’m Joseph Sides, a Data Privacy Advocate and Consultant

Hello, DEV — I’m Joseph Sides, a Data Privacy Advocate and Consultant

6
Comments
3 min read
2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

1
Comments 1
4 min read
JWT Auth in .NET 8: The Validation Settings People Skip

JWT Auth in .NET 8: The Validation Settings People Skip

2
Comments
6 min read
Why End-to-End Encryption Isn't Enough: Building Messaging Apps That Protect Privacy Before a Message Is Opened

Why End-to-End Encryption Isn't Enough: Building Messaging Apps That Protect Privacy Before a Message Is Opened

Comments
3 min read
One hyphen, two tenants, one signing key

One hyphen, two tenants, one signing key

1
Comments
5 min read
OverTheWire Wargames : Natas - LOTS OF DOCS, LOTS OF VULNS

OverTheWire Wargames : Natas - LOTS OF DOCS, LOTS OF VULNS

Comments
3 min read
A real transaction breakdown: what you see vs what is actually happening

A real transaction breakdown: what you see vs what is actually happening

Comments
3 min read
Study: stale documents are RAG poisoning without the attacker

Study: stale documents are RAG poisoning without the attacker

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.