DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Governed Execution Gateway: Securing MCP Servers and Tool Egress Proxies

The Governed Execution Gateway: Securing MCP Servers and Tool Egress Proxies

12
Comments 2
3 min read
Offline License Validation in Rust

Offline License Validation in Rust

Comments
5 min read
How to Prevent License Key Sharing

How to Prevent License Key Sharing

Comments
4 min read
I Let an Agent Take Over an Account With Every Permission Check Green

Runnable proof shows session-split bypasses

I Let an Agent Take Over an Account With Every Permission Check Green

25
Comments 71
4 min read
Blue Watch, Day 4-6: From Alerts to a Story

Blue Watch, Day 4-6: From Alerts to a Story

Comments 3
3 min read
Fix GitHub Copilot Terraform Security Risks Before They Hit Prod

Fix GitHub Copilot Terraform Security Risks Before They Hit Prod

Comments
11 min read
The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

Comments 1
6 min read
My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

24
Comments 3
13 min read
Zero-Trust Data Sovereignty: Enforcing Localized MCP Tool Policies in Multi-Region Stacks

Zero-Trust Data Sovereignty: Enforcing Localized MCP Tool Policies in Multi-Region Stacks

41
Comments
6 min read
A Hidden Button Is Not an Authorisation Boundary

A Hidden Button Is Not an Authorisation Boundary

Comments
4 min read
AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

1
Comments 2
3 min read
Are Microsoft Signed Packages Safe? 73 Were Not

Are Microsoft Signed Packages Safe? 73 Were Not

Comments
8 min read
Command Injection in PHP — When exec() Becomes an Attack Surface

Command Injection in PHP — When exec() Becomes an Attack Surface

1
Comments
9 min read
Are USB Devices a Security Risk for Your PC?

Are USB Devices a Security Risk for Your PC?

Comments
8 min read
Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.