DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to let users bring their own OpenAI or Anthropic API keys (without storing them in plaintext)

How to let users bring their own OpenAI or Anthropic API keys (without storing them in plaintext)

6
Comments 3
5 min read
Applying Bandit SAST to Detect Vulnerabilities in a Python Flask Application

Applying Bandit SAST to Detect Vulnerabilities in a Python Flask Application

Comments
3 min read
Applying Bandit SAST to Detect Vulnerabilities in a Python Flask Application

Applying Bandit SAST to Detect Vulnerabilities in a Python Flask Application

Comments
3 min read
How to Verify an AI Crawler Is Who It Says It Is

How to Verify an AI Crawler Is Who It Says It Is

Comments 6
7 min read
STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

Comments
5 min read
KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

Comments
6 min read
RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

Comments
5 min read
GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

Comments
5 min read
TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

Comments
5 min read
How AegisLink's handshake survives a quantum computer (X3DH + ML-KEM-768)

How AegisLink's handshake survives a quantum computer (X3DH + ML-KEM-768)

Comments
3 min read
GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

Comments 1
4 min read
A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

Comments 2
6 min read
Hello, DEV — I’m Joseph Sides, a Data Privacy Advocate and Consultant

Hello, DEV — I’m Joseph Sides, a Data Privacy Advocate and Consultant

6
Comments
3 min read
2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

1
Comments 1
4 min read
JWT Auth in .NET 8: The Validation Settings People Skip

JWT Auth in .NET 8: The Validation Settings People Skip

2
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.