DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your AI agent shouldn't know your API keys. Here's the gateway I built instead

Your AI agent shouldn't know your API keys. Here's the gateway I built instead

Comments
5 min read
GPT-5.4 Followed a README 2.6x More Than the Same Line in Code. Review Docs Like Code

GPT-5.4 Followed a README 2.6x More Than the Same Line in Code. Review Docs Like Code

1
Comments
8 min read
Verified, then swapped: two supply-chain attacks on the code you didn't write

Verified, then swapped: two supply-chain attacks on the code you didn't write

Comments
8 min read
SonicWall SAML bypass: what to check tonight

SonicWall SAML bypass: what to check tonight

Comments
2 min read
It passed the scan. It did not boot.

It passed the scan. It did not boot.

Comments
2 min read
Crypto Wallet Security: A Checklist With Trade-offs

Crypto Wallet Security: A Checklist With Trade-offs

Comments
2 min read
Connect a Website to the Telegram Bot API Safely

Connect a Website to the Telegram Bot API Safely

Comments
4 min read
Detection is solved, coordination isn't: building an npm incident-response workflow on Switch

Detection is solved, coordination isn't: building an npm incident-response workflow on Switch

Comments
12 min read
When a certificate authority falls, your dev tools have to follow

When a certificate authority falls, your dev tools have to follow

Comments
2 min read
A third-party script can drain your users: SRI and CSP in Laravel and Nginx

A third-party script can drain your users: SRI and CSP in Laravel and Nginx

Comments
3 min read
An Arch fleet inventory model for third-party package risk

An Arch fleet inventory model for third-party package risk

Comments 1
4 min read
Finding XSS before attackers do: auditing your Laravel app with Kali

Finding XSS before attackers do: auditing your Laravel app with Kali

Comments
2 min read
Node.js Login: How to Trace 3 SMS and Email OTP Decisions

Node.js Login: How to Trace 3 SMS and Email OTP Decisions

Comments
8 min read
Check domain expiry, DNS and SSL for a list of domains with one API call in Python

Check domain expiry, DNS and SSL for a list of domains with one API call in Python

Comments
6 min read
When an AI Agent Goes Wrong: A 16-Case First-Hour Response Runbook

When an AI Agent Goes Wrong: A 16-Case First-Hour Response Runbook

Comments
24 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.