DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
DAST false negatives vs SAST false positives: a real case

DAST false negatives vs SAST false positives: a real case

1
Comments
10 min read
What Actually Happens After You Send a Webhook

Includes an interactive simulator to test failures

What Actually Happens After You Send a Webhook

26
Comments 9
6 min read
Zero-Knowledge Architecture: What It Means for Your Files

Zero-Knowledge Architecture: What It Means for Your Files

Comments
3 min read
Why Every CISO Needs an AIBOM in 2026 — And What Vendors Get Wrong

Why Every CISO Needs an AIBOM in 2026 — And What Vendors Get Wrong

Comments
9 min read
OpenClaw puts an AI agent on your messaging apps. The hard part is the trust boundary

OpenClaw puts an AI agent on your messaging apps. The hard part is the trust boundary

Comments
3 min read
[Open Source] Built a tool to discover and risk-score all IAM roles + OIDC trust relationships across AWS accounts

[Open Source] Built a tool to discover and risk-score all IAM roles + OIDC trust relationships across AWS accounts

Comments
1 min read
MII: Machine Identity Intelligence — discover and risk-score IAM roles, OIDC federations, and CI/CD tokens across AWS

MII: Machine Identity Intelligence — discover and risk-score IAM roles, OIDC federations, and CI/CD tokens across AWS

Comments
1 min read
The Drift Protocol Hack: A Six-Month Social Engineering Operation

The Drift Protocol Hack: A Six-Month Social Engineering Operation

Comments
3 min read
COLDCARD Predictable RNG: From Seed Recovery to About $8.86M Bitcoin Theft

COLDCARD Predictable RNG: From Seed Recovery to About $8.86M Bitcoin Theft

Comments
11 min read
Adding Google Login to IdentityServer

Adding Google Login to IdentityServer

Comments
3 min read
The SGX Enclave: Building the First Cryptographically Sovereign Smart City

The SGX Enclave: Building the First Cryptographically Sovereign Smart City

Comments
5 min read
Your SPF record can be valid, published, and completely ignored

Your SPF record can be valid, published, and completely ignored

Comments
5 min read
Human in the loop is not a switch: classify the commands

Human in the loop is not a switch: classify the commands

Comments
4 min read
Why your DMARC reports never arrive (and why Gmail can't be your rua address)

Why your DMARC reports never arrive (and why Gmail can't be your rua address)

Comments 2
4 min read
my AI-code language is now honest all the way down to WebAssembly

my AI-code language is now honest all the way down to WebAssembly

Comments 2
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.